CVE-2020-26965 - log back

CVE-2020-26965 edited at 18 Nov 2020 07:59:55
Description
- An information disclosure issue has been found in Firefox before 83.0. Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password.
+ An information disclosure issue has been found in Firefox before 83.0. Some websites have a feature "Show Password" where clicking a button will change a password field into a textbox field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password.
CVE-2020-26965 edited at 17 Nov 2020 18:25:06
Severity
- Unknown
+ Low
Remote
- Unknown
+ Local
Type
- Unknown
+ Information disclosure
Description
+ An information disclosure issue has been found in Firefox before 83.0. Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/#CVE-2020-26965
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1661617
Notes
CVE-2020-26965 created at 17 Nov 2020 18:15:06