| Assigner | mozilla |
| Reserved | 2024-05-10 |
| Published | 2024-05-14 |
| Updated | 2024-06-12 |
Description
An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.
Problem types
Use of insecure rand() function to generate nonce
Product status
Credits
Hanno Böck
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1870579
https://www.mozilla.org/security/advisories/mfsa2024-21/
