Security Advisory

CVE-2015-2714

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-05-14 10:00:00

Last updated 2024-08-06 05:24:38

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.

← Browse all CVEs View on cve.org ↗