CVE-2007-5967

CVE-2007-5967

Vendor N/A

Product Mozilla Firefox

Weakness CWE-295

Published May 17, 2021

Last update August 7, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.

Key dates

02Disclosure timeline

May 17, 2021 CVE published

August 7, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2007-5967 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

04Related CVE

CVE-2022-37437 Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation CVE-2022-32210 CVE-2024-25642 Improper Certificate Validation in SAP Cloud Connector CVE-2026-34580 Botan has a certificate authentication bypass due to trust anchor confusion CVE-2026-45745 Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft