WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate
Published Jun 24, 2025
9.8
CRITICALCVSS 3.1
EPSS 0.30%
Description
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.
Affected products
No data.
No data.
Red Hat Enterprise Linux 10
firefox
Not affected
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Not affected
Red Hat Enterprise Linux 6
firefox
Not affected
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 9
firefox
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 9 | firefox | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (8)
- https://access.redhat.com/security/cve/CVE-2025-6433 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1954033 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2374567 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19088 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-6433
- https://www.cve.org/CVERecord?id=CVE-2025-6433
- https://www.mozilla.org/security/advisories/mfsa2025-51/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-54/
Change history (0)
No recorded changes yet.