CVE-2022-45419: Medium severity firefox vulnerability
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-45419?
CVE-2022-45419 is a vulnerability in Mozilla Firefox that allows an attacker to keep an ongoing TLS connection alive even after the user has deleted a security exception for an invalid TLS certificate, making it seem like the certificate is still trusted.
How does CVE-2022-45419 affect Mozilla Firefox?
CVE-2022-45419 affects Mozilla Firefox by allowing an attacker to deceive the user into thinking that an invalid TLS certificate is still trusted.
What is the severity of CVE-2022-45419?
The severity of CVE-2022-45419 is medium, with a severity score of 6.5.
How can I fix CVE-2022-45419 in Mozilla Firefox?
To fix CVE-2022-45419 in Mozilla Firefox, update to version 107.0 or later.
Where can I get more information about CVE-2022-45419?
You can find more information about CVE-2022-45419 on the Mozilla website and in the associated security advisories.