CVE

Id
84461  
CVE No.
CVE-2015-7184  
Status
Candidate  
Description
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748177 84461 CVE-2015-7184 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-115.html  View
748178 84461 CVE-2015-7184 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1208339  View
748179 84461 CVE-2015-7184 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1212669  View
748180 84461 CVE-2015-7184 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
748181 84461 CVE-2015-7184 SUSE:openSUSE-SU-2015:1817  View
748182 84461 CVE-2015-7184 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00021.html  View
748183 84461 CVE-2015-7184 UBUNTU:USN-2768-1  View
748184 84461 CVE-2015-7184 URL:http://www.ubuntu.com/usn/USN-2768-1  View
748185 84461 CVE-2015-7184 BID:77100  View
748186 84461 CVE-2015-7184 URL:http://www.securityfocus.com/bid/77100  View
748187 84461 CVE-2015-7184 SECTRACK:1033820  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9725 JVNDB-2015-005045 rpcbind の rpcb_svc_com.c の xprt_set_caller におけるサービス運用妨害 (DoS) の脆弱性 rpcbind の rpcb_svc_com.c の xprt_set_caller には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-7236 84461 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005045.html  View