CVE-2019-11748
Medium
Description
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the possibility of trusted WebRTC resources being invisibly embedded in web content and abusing permissions previously given by users. Users will now be prompted for permissions on each use. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Mozilla Firefox
PublishedSep 27, 2019
First seenSep 27, 2019
How to fix
Update
- mozilla firefox69.0 or later
- mozilla firefox_esr68.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla firefox | v < 69.0 | 69.0 |
| mozilla firefox_esr | v < 68.1.0 | 68.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.