WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the possibility of trusted WebRTC resources being invisibly embedded in web content and abusing permissions previously given by users. Users will now be prompted for permissions on each use. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 27, 2019 |
| Centos_linux | — | Upgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade firefox | Sep 5, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade firefox-esr | Jul 30, 2024 | Sep 27, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade waterfoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esr | Sep 4, 2019 | Sep 3, 2019 |
| Mfsa2019 25 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 69.0 | Sep 4, 2019 | Sep 3, 2019 |
| Mfsa2019 26 | — | Upgrade to Mozilla Firefox ESR version 68.1Upgrade to the latest version of Mozilla Firefox | Sep 4, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade firefox | Jul 21, 2020 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade firefoxNo solution existsUpgrade firefox-debuginfoUpgrade firefox-debugsource | Sep 5, 2019 | Sep 4, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nsprUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libsoftokn3-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3Upgrade firefox-libffi7Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-dataUpgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-toolsUpgrade mozillafirefox-branding-sleUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gio-branding-upstreamUpgrade firefox-libpango-1_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-libcairo2Upgrade libsoftokn3Upgrade firefox-libgtk-3-0Upgrade mozilla-nspr-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-langUpgrade MozillaFirefox-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade firefox-libharfbuzz0Upgrade mozilla-nss-toolsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-glib2-langUpgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-tools | Oct 8, 2019 | Sep 3, 2019 |
| Ubuntu | — | Upgrade firefox | Sep 5, 2019 | Sep 3, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub