NVD

Id
47690  
Name
CVE-2009-0358  
Description
Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim"s browser, as demonstrated by reading the response page of an https POST request.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-02-04  
Modified Date
2011-09-12  
Seq
2009-0358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238979 47690 CVE-2009-0358 http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx  View
238980 47690 CVE-2009-0358 SUSE-SA:2009:009  View
238981 47690 CVE-2009-0358 oval:org.mitre.oval:def:10610  View
238982 47690 CVE-2009-0358 RHSA-2009:0256  View
238983 47690 CVE-2009-0358 http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm  View
238984 47690 CVE-2009-0358 MDVSA-2009:044  View
238985 47690 CVE-2009-0358 http://www.mozilla.org/security/announce/2009/mfsa2009-06.html  View
238986 47690 CVE-2009-0358 33598  View
238987 47690 CVE-2009-0358 1021667  View
238988 47690 CVE-2009-0358 USN-717-1  View
238989 47690 CVE-2009-0358 ADV-2009-0313  View
238990 47690 CVE-2009-0358 https://bugzilla.mozilla.org/show_bug.cgi?id=441751  View
238991 47690 CVE-2009-0358 FEDORA-2009-1399  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40034 JVNDB-2009-001040 Mozilla Firefox における重要な情報が取得される脆弱性 Mozilla Firefox には、no-store および no-cache の Cache-Control ディレクティブが無視されてしまうため、戻るボタンまたは履歴一覧の使用により重要な情報が取得される脆弱性が存在します。 CVE-2009-0358 37789 CVE-2009-0358 47690 3.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001040.html 2009-02-03 2009-03-02 View