NVD

Id
24717  
Name
CVE-2015-2714  
Description
Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-05-14  
Modified Date
2017-01-02  
Seq
2015-2714  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130188 24717 CVE-2015-2714 http://www.mozilla.org/security/announce/2015/mfsa2015-52.html  View
130189 24717 CVE-2015-2714 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130190 24717 CVE-2015-2714 74611  View
130191 24717 CVE-2015-2714 https://bugzilla.mozilla.org/show_bug.cgi?id=1149094  View
130192 24717 CVE-2015-2714 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7342 JVNDB-2015-002662 Android 上で稼働する Mozilla Firefox における重要な情報を取得される脆弱性 Android 上で稼働する Mozilla Firefox は、Android ロギングシステムへの URL データの書き込みを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-2714 79939 CVE-2015-2714 24717 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002662.html 2015-05-12 2015-05-15 View