CVE-2019-11733

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password if the master password had been previously entered in the same session, allowing for potential theft of stored passwords. This vulnerability affects Firefox < 68.0.2 and Firefox ESR < 68.0.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 68.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
132.0.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
bionic
Fixed 68.0.2+build1-0ubuntu0.18.04.1
released
disco
Fixed 68.0.2+build1-0ubuntu0.19.04.1
released
trusty
dne
xenial
Fixed 68.0.2+build1-0ubuntu0.16.04.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise desktop 15
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP1
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP2
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP3
78.10.0-8.38.1
fixed
suse enterprise desktop 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise desktop 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise desktop 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise desktop 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise sap 12 SP1
68.1.0-109.89.1
fixed
suse enterprise sap 12 SP4
68.1.0-109.89.1
fixed
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise sap 15
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP1
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP2
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP3
78.10.0-8.38.1
fixed
suse enterprise sap 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise sap 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise sap 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise sap 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise server 12 SP1
68.1.0-109.89.1
fixed
suse enterprise server 12 SP2
68.1.0-109.89.1
fixed
suse enterprise server 12 SP3
68.1.0-109.89.1
fixed
suse enterprise server 12 SP4
68.1.0-109.89.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 15
68.1.0-3.54.2
fixed
suse enterprise server 15 SP1
68.1.0-3.54.2
fixed
suse enterprise server 15 SP2
68.1.0-3.54.2
fixed
suse enterprise server 15 SP3
78.10.0-8.38.1
fixed
suse enterprise server 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise server 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise server 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise server 15 SP7
128.9.0-150200.152.176.1
fixed
MozillaFirefox-branding-SLE-68
suse enterprise desktop 15
4.8.5
fixed
suse enterprise desktop 15 SP1
4.8.5
fixed
suse enterprise desktop 15 SP2
4.8.5
fixed
suse enterprise sap 12 SP1
32.8.1
fixed
suse enterprise sap 12 SP4
32.8.1
fixed
suse enterprise sap 12 SP5
32.8.1
fixed
suse enterprise sap 15
4.8.5
fixed
suse enterprise sap 15 SP1
4.8.5
fixed
suse enterprise sap 15 SP2
4.8.5
fixed
suse enterprise server 12 SP1
32.8.1
fixed
suse enterprise server 12 SP2
32.8.1
fixed
suse enterprise server 12 SP3
32.8.1
fixed
suse enterprise server 12 SP4
32.8.1
fixed
suse enterprise server 12 SP5
32.8.1
fixed
suse enterprise server 15
4.8.5
fixed
suse enterprise server 15 SP1
4.8.5
fixed
suse enterprise server 15 SP2
4.8.5
fixed
MozillaFirefox-devel
suse enterprise desktop 15
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP1
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP2
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP3
78.10.0-8.38.1
fixed
suse enterprise desktop 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise desktop 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise desktop 15 SP6
102.12.0-150200.152.90.1
fixed
suse enterprise desktop 15 SP7
102.12.0-150200.152.90.1
fixed
suse enterprise sap 12 SP1
68.1.0-109.89.1
fixed
suse enterprise sap 15
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP1
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP2
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP3
78.10.0-8.38.1
fixed
suse enterprise sap 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise sap 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise sap 15 SP6
102.12.0-150200.152.90.1
fixed
suse enterprise sap 15 SP7
102.12.0-150200.152.90.1
fixed
suse enterprise server 12 SP1
68.1.0-109.89.1
fixed
suse enterprise server 12 SP2
68.1.0-109.89.1
fixed
suse enterprise server 15
68.1.0-3.54.2
fixed
suse enterprise server 15 SP1
68.1.0-3.54.2
fixed
suse enterprise server 15 SP2
68.1.0-3.54.2
fixed
suse enterprise server 15 SP3
78.10.0-8.38.1
fixed
suse enterprise server 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise server 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise server 15 SP6
102.12.0-150200.152.90.1
fixed
suse enterprise server 15 SP7
102.12.0-150200.152.90.1
fixed
MozillaFirefox-translations-common
suse enterprise desktop 15
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP1
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP2
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP3
78.10.0-8.38.1
fixed
suse enterprise desktop 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise desktop 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise desktop 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise desktop 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise sap 12 SP1
68.1.0-109.89.1
fixed
suse enterprise sap 12 SP4
68.1.0-109.89.1
fixed
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise sap 15
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP1
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP2
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP3
78.10.0-8.38.1
fixed
suse enterprise sap 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise sap 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise sap 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise sap 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise server 12 SP1
68.1.0-109.89.1
fixed
suse enterprise server 12 SP2
68.1.0-109.89.1
fixed
suse enterprise server 12 SP3
68.1.0-109.89.1
fixed
suse enterprise server 12 SP4
68.1.0-109.89.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 15
68.1.0-3.54.2
fixed
suse enterprise server 15 SP1
68.1.0-3.54.2
fixed
suse enterprise server 15 SP2
68.1.0-3.54.2
fixed
suse enterprise server 15 SP3
78.10.0-8.38.1
fixed
suse enterprise server 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise server 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise server 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise server 15 SP7
128.9.0-150200.152.176.1
fixed
MozillaFirefox-translations-other
suse enterprise desktop 15
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP1
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP2
68.1.0-3.54.2
fixed
suse enterprise desktop 15 SP3
78.10.0-8.38.1
fixed
suse enterprise desktop 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise desktop 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise desktop 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise desktop 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise sap 15
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP1
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP2
68.1.0-3.54.2
fixed
suse enterprise sap 15 SP3
78.10.0-8.38.1
fixed
suse enterprise sap 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise sap 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise sap 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise sap 15 SP7
128.9.0-150200.152.176.1
fixed
suse enterprise server 15
68.1.0-3.54.2
fixed
suse enterprise server 15 SP1
68.1.0-3.54.2
fixed
suse enterprise server 15 SP2
68.1.0-3.54.2
fixed
suse enterprise server 15 SP3
78.10.0-8.38.1
fixed
suse enterprise server 15 SP4
91.8.0-150200.152.26.1
fixed
suse enterprise server 15 SP5
102.11.0-150200.152.87.1
fixed
suse enterprise server 15 SP6
115.10.0-150200.152.134.1
fixed
suse enterprise server 15 SP7
128.9.0-150200.152.176.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
firefox
RHEL 6
0:60.9.0-1.el6_10
fixed
RHEL 7
0:60.9.0-1.el7_7
fixed