CVE-2018-5179 Vulnerability Details

  /     /     /  

CVE-2018-5179 Metadata Quick Info

CVE Published: 26/04/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: mozilla | Vendor: n/a | Product: Firefox
Status : PUBLISHED

---

CVE-2018-5179 Description

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Covert Channel
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).