CVE-2015-8512

Published: Jan 9, 2016Modified: May 6, 2026

4.6

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses.

Affected (1)

Products: Mozilla: Firefox Os

Mozilla

1 product

Firefox Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox Os	Up to 2.2

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://www.mozilla.org/security/announce/2015/mfsa2015-151.html

Source: security@mozilla.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1181571

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2015/mfsa2015-151.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1181571

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.