CVE-2018-5115: Infoleak
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the authentication request and may cause users to mistakenly send private credential information to a third party site.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-5091
- CVE-2018-5092
- CVE-2018-5093
- CVE-2018-5094
- CVE-2018-5095
- CVE-2018-5097
- CVE-2018-5098
- CVE-2018-5099
- CVE-2018-5100
- CVE-2018-5101
- CVE-2018-5102
- CVE-2018-5103
- CVE-2018-5104
- CVE-2018-5105
- CVE-2018-5106
- CVE-2018-5107
- CVE-2018-5108
- CVE-2018-5109
- CVE-2018-5110
- CVE-2018-5111
- CVE-2018-5112
- CVE-2018-5113
- CVE-2018-5114
- CVE-2018-5115
- CVE-2018-5116
- CVE-2018-5117
- CVE-2018-5118
- CVE-2018-5119
- CVE-2018-5121
- CVE-2018-5122
- CVE-2018-5090
- CVE-2018-5089
Frequently Asked Questions
What is CVE-2018-5115?
CVE-2018-5115 is a vulnerability where an HTTP authentication prompt triggered by a background network request is displayed over the currently loaded foreground page, causing user confusion.
How does CVE-2018-5115 affect Mozilla Firefox?
Mozilla Firefox versions up to 58.0 are affected by CVE-2018-5115.
How can I fix CVE-2018-5115 on Ubuntu?
To fix CVE-2018-5115 on Ubuntu, update Firefox to version 58.0 or higher.
What is the severity of CVE-2018-5115?
CVE-2018-5115 has a severity rating of 7.5 (High).
What is the Common Weakness Enumeration (CWE) ID of CVE-2018-5115?
The Common Weakness Enumeration (CWE) ID of CVE-2018-5115 is 200.