Mozilla Releases Security Update Addressing Mozilla VPN Vulnerability
SPP Posts Final Approved 2022 ITP Short-Circuit Model Information
March 1, 2022REMINDER: GE-Identified Recent Protection Relay Vulnerabilities
March 1, 2022
Summary:
An attacker could exploit this vulnerability to take control of an affected system. Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. CISA encourages users and administrators to review Mozilla Foundation Security Advisory 2022-08 and make the necessary update.
Additional Discussion:
Products:
- Mozilla VPN
- Fixed in Mozilla VPN 2.7.1
Link:
