CVE-2020-35208

Katalog CVE

CVSS 5.7 · Medium EPSS 0,48%

Kerentanan Improper Authentication pada logmein lastpass. Skor CVSS 3.1 5.7 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices

Rincian

Terbit di NVD

12 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.7 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/evilblazer/LastPassVulnerabilities exploit · advisory pihak ketiga
• https://youtu.be/63PfHVSr8iw exploit · advisory pihak ketiga