Home > Vulnerability Database > CVE-2015-0822

Mend.io Vulnerability Database

CVE-2015-0822

Date: February 25, 2015

The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.

Severity Score

3.7

Related Resources (26)

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-0822

Url: http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html

Url: http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html

Url: http://www.debian.org/security/2015/dsa-3179

Url: http://www.securityfocus.com/bid/72756

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-0822

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html

Url: http://www.ubuntu.com/usn/USN-2505-1

Url: http://www.ubuntu.com/usn/USN-2506-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1110557

Url: https://security.gentoo.org/glsa/201504-01

Url: http://www.debian.org/security/2015/dsa-3174

Url: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0266.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Url: http://www.mozilla.org/security/announce/2015/mfsa2015-24.html

Url: http://www.securitytracker.com/id/1031791

Url: http://rhn.redhat.com/errata/RHSA-2015-0265.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0642.html

Url: http://www.securitytracker.com/id/1031792

Url: https://access.redhat.com/security/cve/CVE-2015-0822

Url: https://www.mend.io/vulnerability-database/CVE-2015-0822

Severity Score

3.7

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-0822

Date: February 25, 2015

Severity Score

Related Resources (26)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?