VULNERABILITY INTELLIGENCE

CVE-2015-2714

CVSS score2.1 LOW
EPSS probability0.33%
CISA KEVNot currently listed
Published2015-05-14
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.

Primary references