SB2020062617 - Information disclosure in Mozilla Firefox for iOS
Published: June 26, 2020
Security Bulletin ID
SB2020062617
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2020-12414)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the IndexedDB should be cleared when leaving private browsing mode and it is not, the API for "WKWebViewConfiguration" was being used incorrectly and requires the private instance of this object be deleted when leaving private mode.
Remediation
Install update from vendor's website.