CVE-2016-5288

MEDIUM

Firefox < 49.0.2 - Exposure of Sensitive Information via HTTP Cache

Title source: llm
STIX 2.1

Description

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

References (4)

Core 4
Core References
Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1310183
Vendor Advisory x_refsource_confirm
https://www.mozilla.org/security/advisories/mfsa2016-87/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93810
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037077

Scores

CVSS v3 5.9
EPSS 0.0072
EPSS Percentile 72.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
mozilla/firefox < 49.0.2
Published Jun 11, 2018
Tracked Since Feb 18, 2026