Lucene search

K
cve[email protected]CVE-2022-4610
HistoryDec 19, 2022 - 3:15 p.m.

CVE-2022-4610

2022-12-1915:15:10
CWE-327
CWE-310
web.nvd.nist.gov
27
cve-2022-4610
click studios
passwordstate
browser extension
chrome
vulnerability
local access
cryptographic algorithm
exploit
vdb-216272
nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272.

Affected configurations

NVD
Node
clickstudiospasswordstateRange<9.5
OR
clickstudiospasswordstateMatch9.5build_9500-
OR
clickstudiospasswordstateMatch9.5build_9512-
OR
clickstudiospasswordstateMatch9.5build_9519-
OR
clickstudiospasswordstateMatch9.5build_9531-
OR
clickstudiospasswordstateMatch9.5build_9533-
OR
clickstudiospasswordstateMatch9.5build_9535-
OR
clickstudiospasswordstateMatch9.5build_9583-
Node
clickstudiospasswordstateMatch9.5.8.4chrome

CNA Affected

[
  {
    "vendor": "Click Studios",
    "product": "Passwordstate",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Click Studios",
    "product": "Passwordstate Browser Extension Chrome",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CVE-2022-4610