CVE-2021-29974
CVE-2021-29974
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
05 ago 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to override an error on a domain which had specified HTTP Strict Transport Security (which implies that the error should not be override-able.) This issue did not affect the network connections, and they were correctly upgraded to HTTPS automatically. This vulnerability affects Firefox < 90.
Productos afectados
Mozilla · Firefox¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →