Lucene search
MitreCVE-2024-42219HistoryAug 06, 2024 - 9:16 p.m.
CVE-2024-42219
2024-08-0621:16:03
CWE-1289
mitre
web.nvd.nist.gov
14
22
1password 8
local attackers
exfiltrate vault items
xpc communication validation
insufficient
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.5%
1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.
Affected configurations
Node
1password1passwordRange8.0–8.10.36macos
Social References
More
Related
nessus
nessus
AgileBits 1Password IPC Protection Bypass (CVE-2024-42219) (macOS)
2024-08-13 00:00:00
cvelist
cvelist
CVE-2024-42219
2024-08-06 00:00:00
nvd
nvd
CVE-2024-42219
2024-08-06 21:16:03
vulnrichment
vulnrichment
CVE-2024-42219
2024-08-06 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.5%
Related for CVE-2024-42219