CVE-2022-25570

Katalog CVE

CVSS 6.5 · Medium EPSS 0,82%

Kerentanan Incorrect Default Permissions pada clickstudios passwordstate. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without permissions. Specifically, an authenticated user who has write permissions to a password list in one folder (with the default permission model) can extend his permissions to all other password lists in the same folder.

Rincian

Terbit di NVD

21 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 56,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sysadms.de/2022/03/cve-2022-25570-standard-berechtigungsmodell-im-passwortmanager-passwordstate-ermoeg... exploit · advisory pihak ketiga
• https://www.clickstudios.com.au/passwordstate-changelog.aspx release notes