CVE-2022-4610
LOW
1,9
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: high
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
Description
AI Translation Available
A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0007
Percentile
0,2th
Updated
EPSS Score Trend (Last 91 Days)
327
Use of a Broken or Risky Cryptographic Algorithm
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Accountability
Non-Repudiation
Potential Impacts:
Read Application Data
Modify Application Data
Hide Activities
Applicable Platforms
Languages:
Not Language-Specific, Verilog, VHDL
Technologies:
Not Technology-Specific, ICS/OT
Application
Passwordstate by Clickstudios
Version Range Affected
To
9.5
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9500:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9533:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9519:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9512:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5.8.4:*:*:*:*:chrome:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9535:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9583:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Passwordstate by Clickstudios
CPE Identifier
View Detailed Analysis
cpe:2.3:a:clickstudios:passwordstate:9.5:build_9531:*:*:*:-:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_m…
https://vuldb.com/?id.216272
https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Repor…
https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_m…
https://vuldb.com/?id.216272
https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Repor…