CVE-2020-6824: Low severity firefox vulnerability
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwords would have been identical, rather than independent.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-6824?
CVE-2020-6824 is a vulnerability in Mozilla Firefox that allows passwords generated in Private Browsing mode to be accessed in subsequent Private Browsing sessions.
How does CVE-2020-6824 impact users?
CVE-2020-6824 allows an attacker to potentially access passwords generated in Private Browsing mode by a user.
What is the severity of CVE-2020-6824?
The severity of CVE-2020-6824 is medium, with a CVSS score of 2.8.
How can I fix CVE-2020-6824 in Firefox?
To fix CVE-2020-6824 in Firefox, users should update to version 75 or higher.
Where can I find more information about CVE-2020-6824?
You can find more information about CVE-2020-6824 on the Mozilla website or the MITRE CVE database.