CVE-2020-6824

Published: 7 April 2020

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwords would have been identical, rather than independent. This vulnerability affects Firefox < 75.

Priority

Medium

CVSS 3 base score: 2.8

Status

Notes

mozjs contains a copy of the SpiderMonkey JavaScript engine

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6824
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-12/#CVE-2020-6824
• https://ubuntu.com/security/notices/USN-4323-1
• NVD
• Launchpad
• Debian