Alarm raised over Mozilla VPN: Wonky authorization check lets users cause havoc

SUSE security engineer goes public on unfixed problem after disclosure drama

A security engineer at Linux distro maker SUSE has published an advisory for a flaw in the Mozilla VPN client for Linux that has yet to be addressed in a publicly released fix because the disclosure process went off the rails.…

from The Register