Description
The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in version 3.2.5, but reintroduced in later versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Private Internet Access | Firefox extension | 3.2.5 – ≤ 4.0.5 | — |