description: A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.
problem types: CWE-295
affected:
{
product: Mozilla Firefox
vendor: n/a
versions:
status: affected, version: unknown
}