CVE-2022-4610

Katalog CVE

CVSS 5.5 · Medium EPSS 0,24%

Kerentanan Cryptographic Issues pada clickstudios passwordstate. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272.

Rincian

Terbit di NVD

19 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-310: Cryptographic Issues
CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html exploit · advisory pihak ketiga
• https://vuldb.com/?id.216272 advisory pihak ketiga
• https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf exploit · advisory pihak ketiga