Test ID:	1.3.6.1.4.1.25623.1.0.805216
Category:	General
Title:	Mozilla Firefox CSP Information Disclosure Vulnerability Dec14 (Windows)
Summary:	This host is installed with Mozilla Firefox; and is prone to information disclosure vulnerability.
Description:	Summary: This host is installed with Mozilla Firefox and is prone to information disclosure vulnerability. Vulnerability Insight: Flaw exists due to an error when handling Content Security Policy (CSP) violation reports triggered by a redirect. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to usernames or single-sign-on tokens. Affected Software/OS: Mozilla Firefox version 33.0 on Windows Solution: Upgrade to Mozilla Firefox version 34.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	BugTraq ID: 71399 Common Vulnerability Exposure (CVE) ID: CVE-2014-1591 https://security.gentoo.org/glsa/201504-01
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.