Bug 2011098 (CVE-2021-38497)

Summary:	CVE-2021-38497 Mozilla: Validation message could have been overlaid on another origin
Product:	[Other] Security Response	Reporter:	Doran Moppert <dmoppert>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	erack, jhorak, nobody, stransky, tpopela
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	firefox 91.2, thunderbird 91.2	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-11 14:08:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2009139, 2009140, 2009141, 2009142, 2009143, 2009144, 2009145, 2010723, 2010724, 2010725, 2010727, 2010728, 2010729, 2010730, 2010731, 2010732
Bug Blocks:	2008932

Description Doran Moppert 2021-10-06 00:36:58 UTC

Through use of `reportValidity()` and `window.open()`, a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks.



External Reference:

https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/#CVE-2021-38497

Comment 1 errata-xmlrpc 2021-10-11 08:10:33 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Extended Update Support

Via RHSA-2021:3756 https://access.redhat.com/errata/RHSA-2021:3756

Comment 2 errata-xmlrpc 2021-10-11 08:12:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.1 Extended Update Support

Via RHSA-2021:3757 https://access.redhat.com/errata/RHSA-2021:3757

Comment 3 errata-xmlrpc 2021-10-11 08:13:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2021:3755 https://access.redhat.com/errata/RHSA-2021:3755

Comment 4 Product Security DevOps Team 2021-10-11 14:08:19 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2021-38497

Comment 5 errata-xmlrpc 2021-10-12 14:22:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2021:3791 https://access.redhat.com/errata/RHSA-2021:3791

Comment 6 errata-xmlrpc 2021-10-13 09:25:49 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.1 Extended Update Support

Via RHSA-2021:3840 https://access.redhat.com/errata/RHSA-2021:3840

Comment 7 errata-xmlrpc 2021-10-13 09:26:44 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Extended Update Support

Via RHSA-2021:3839 https://access.redhat.com/errata/RHSA-2021:3839

Comment 8 errata-xmlrpc 2021-10-13 09:31:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2021:3838 https://access.redhat.com/errata/RHSA-2021:3838

Comment 9 errata-xmlrpc 2021-10-13 09:57:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2021:3841 https://access.redhat.com/errata/RHSA-2021:3841