CVE-2009-0358 — Sensitive Information Exposure in Mozilla Firefox
Severity
3.3LOWNVD
EPSS
0.2%
top 58.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 4
Latest updateMay 2
Description
Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
CVSS vector
AV:A/AC:L/C:P/I:N/A:NExploitability: 6.5 | Impact: 2.9