Severity
Medium
Analysis Summary
CVE-2023-6135
Mozilla Network Security Services (NSS) NIST curves, as used in Mozilla Firefox, could allow a remote attacker to obtain sensitive information, caused by a side-channel attack known as “Minerva”. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to recover private keys.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2023-6135
Affected Vendors
Mozilla
Affected Products
- Mozilla Firefox 120
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.