Vulnerability CVE-2018-18495

Vulnerability Name:

CVE-2018-18495 (CCN-154150)

Assigned:

2018-12-11

Published:

2018-12-11

Updated:

2020-08-24

Summary:

WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox < 64.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-732

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2018-18495

Source: BID
Type: Third Party Advisory, VDB Entry
106167

Source: CONFIRM
Type: Issue Tracking, Permissions Required, Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1427585

Source: XF
Type: UNKNOWN
firefox-cve201818495-sec-bypass(154150)

Source: UBUNTU
Type: Third Party Advisory
USN-3844-1

Source: CCN
Type: Mozilla Foundation Security Advisory 2018-29
Security vulnerabilities fixed in Firefox 64

Source: CONFIRM
Type: Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-29/

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2018-18495

Vulnerable Configuration:

Configuration 1:

cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:* (Version < 64.0)

Configuration 2:

cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:111899	P	MozillaFirefox-92.0-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105476	P	MozillaFirefox-92.0-1.2 on GA media (Moderate)	2021-10-01
oval:com.ubuntu.bionic:def:201818495000	V	CVE-2018-18495 on Ubuntu 18.04 LTS (bionic) - medium.	2019-02-28
oval:com.ubuntu.cosmic:def:2018184950000000	V	CVE-2018-18495 on Ubuntu 18.10 (cosmic) - medium.	2019-02-28
oval:com.ubuntu.cosmic:def:201818495000	V	CVE-2018-18495 on Ubuntu 18.10 (cosmic) - medium.	2019-02-28
oval:com.ubuntu.bionic:def:2018184950000000	V	CVE-2018-18495 on Ubuntu 18.04 LTS (bionic) - medium.	2019-02-28
oval:com.ubuntu.trusty:def:201818495000	V	CVE-2018-18495 on Ubuntu 14.04 LTS (trusty) - medium.	2019-02-28
oval:com.ubuntu.xenial:def:2018184950000000	V	CVE-2018-18495 on Ubuntu 16.04 LTS (xenial) - medium.	2019-02-28
oval:com.ubuntu.xenial:def:201818495000	V	CVE-2018-18495 on Ubuntu 16.04 LTS (xenial) - medium.	2019-02-28

BACK