Skip to main content

Firefox Os CVE-2015-5960

LOW
Improper Access Control (CWE-284)
2015-08-08 cve@mitre.org
Mozilla Authentication Bypass Firefox Os
1.9
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:P/I:N/A:N
Attack Vector
Local
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 08, 2015 - 00:59 cve.org
LOW 1.9

DescriptionCVE.org

Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount operation.

AnalysisAI

Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount. Rated low severity (CVSS 1.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount operation. Affected products include: Mozilla Firefox Os. Version information: before 2.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Firefox Os

View all
CVE-2015-4487 HIGH
7.5 Aug 16

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS befo
CVE-2015-4489 HIGH
7.5 Aug 16

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might al
CVE-2015-4488 HIGH
7.5 Aug 16

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38
CVE-2015-8511 MEDIUM
6.4 Jan 09

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypas
CVE-2015-8510 MEDIUM
6.1 Jan 09

Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Fi
CVE-2015-5962 MEDIUM
5.0 Aug 08

Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management i
CVE-2015-8512 MEDIUM
4.6 Jan 09

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which
CVE-2015-2745 MEDIUM
4.3 Aug 08

Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow rem
CVE-2015-4494 MEDIUM
4.3 Aug 08

Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allow
CVE-2015-2744 MEDIUM
4.3 Aug 08

Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attack
CVE-2015-5961 LOW
3.3 Aug 08

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web s

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2015-5960 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy