Security restrictions bypass in Mozilla VPN for Linux

1) Improper Authentication

EUVDB-ID: #VU80396

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-4104

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to an invalid Polkit Authentication check and missing authentication requirements for D-Bus methods. A local user can bypass implemented security restrictions and configure arbitrary VPN setups.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mozilla VPN for Linux: 2.0.0 - 2.16.1

CPE2.3

• cpe:2.3:a:mozilla:mozilla_vpn_linux:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:mozilla_vpn_linux:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:mozilla_vpn_linux:2.0.3:*:*:*:*:*:*:*

External links

https://www.mozilla.org/en-US/security/advisories/mfsa2023-39/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.