Severity
High
Analysis Summary
CVE-2023-4104
Mozilla VPN could allow a local authenticated attacker to bypass security restrictions, caused by an incomplete implementation of Polkit authentication. By sending a specially crafted request, an attacker could exploit this vulnerability to configure arbitrary VPN setups or redirect network traffic to malicious parties.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2023-4104
Affected Vendors
Mozilla
Affected Products
- Mozilla VPN 2.15.2
Remediation
Refer to mozilla-vpn-client for patch, upgrade or suggested workaround information.