Vulnerability in Google Android
CVE-2015-2714
Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.
EPSS: 0.003 (25.4th percentile) — read the EPSS interpretation.
Affected products
- Google Android
- Mozilla Firefox
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (vdb-entry, x_refsource_BID)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (vendor-advisory, x_refsource_GENTOO)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)