NetSight
IP …
medium5.9

CVE-2018-5131

Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instea…

Impact

Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
MozillaFirefox
before 59.0
before 52.7.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.4
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10

Weakness classification

CWE-200

References