CVE-2017-5384 : Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which

Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed to be non-malicious, but if a user has enabled Web Proxy Auto Detect (WPAD) this file can be served remotely. This vulnerability affects Firefox < 51.

Published 2018-06-11 21:29:03

Updated 2018-08-07 16:47:35

Source Mozilla Corporation

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2017-5384

EPSS FAQ

0.66%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-5384

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2017-5384

https://www.mozilla.org/security/advisories/mfsa2017-01/

Security vulnerabilities fixed in Firefox 51 — Mozilla
Vendor Advisory

CVEs referencing this url
https://www.contextis.com//resources/blog/leaking-https-urls-20-year-old-vulnerability/

Sniffing HTTPS URLS with malicious PAC files | Context Information Security UK
Exploit;Technical Description;Third Party Advisory
http://www.securitytracker.com/id/1037693

Mozilla Firefox Multiple Bugs Let Remote Users Bypass Security Restrictions, Spoof URLs, Obtain Potentially Sensitive Information, and Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=1255474

1255474 - (CVE-2017-5384) Proxy Auto-Config SSL/TLS Url Disclosure
Issue Tracking;Patch;Vendor Advisory
http://www.securityfocus.com/bid/95763

Mozilla Firefox Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url

Products affected by CVE-2017-5384

Mozilla » Firefox
Versions before (<) 51.0
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2017-5384

Exploit prediction scoring system (EPSS) score for CVE-2017-5384

CVSS scores for CVE-2017-5384

CWE ids for CVE-2017-5384

References for CVE-2017-5384

Products affected by CVE-2017-5384