CVE-2015-2714 PUBLISHED CVSS 2.0999999046325684 LOW

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.

EPSS 0.10% · 27.8th percentile

Risk Scores

CVSS v2.0
2.0999999046325684
EPSS Score
0.10%
27.8th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillafirefox0

Timeline

References

Open in Interactive Console →