Vulnerabilities > CVE-2023-6135 - Information Exposure Through Discrepancy vulnerability in Mozilla Firefox

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mozilla
CWE-203
NVD
Published: 2023-12-19
Updated: 2024-01-07

Summary

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

Vulnerable Configurations

Part Description Count
Application
Mozilla
626

Common Weakness Enumeration (CWE)

References