PT-2020-17293 · Logmein · Logmein Lastpass Password Manager

Name of the Vulnerable Software and Affected Versions: LogMein LastPass Password Manager version 4.8.11.2403 Description: An issue was discovered in the LogMein LastPass Password Manager app for iOS, where the password authentication for unlocking can be bypassed by forcing the authentication...

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

Design/Logic Flaw

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

CVE-2019-16371

CVE-2019-16371 affects LogMeIn LastPass prior to version 4.33.0. The issue arises from a vulnerability where a crafted website can bypass do_popupregister via clickjacking, enabling credential harvesting for accounts on previously visited sites. This is documented across multiple sources (NVD and...

Unspecified Vulnerability in LogMeIn LastPass

LogMeIn LastPass is a cross-platform online password management tool from LogMeIn USA. A security vulnerability exists in LogMeIn LastPass versions prior to 4.33.0. An attacker could exploit the vulnerability by building a specially crafted website to capture credentials for user accounts...

CVE-2019-16371: Improper Restriction of Rendered UI Layers or Frames

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

PT-2019-14648

Name of the Vulnerable Software and Affected Versions LogMeIn LastPass versions prior to 4.33.0 Description The issue allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site. This is possible because the do popupregist...

CVE-2019-13637

In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a...

Design/Logic Flaw

In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a...

CVE-2019-13637

In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a...

CVE-2019-13637

In LogMeIn join.me prior to version 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. The root cause is unsafe search paths used by the application URI defined in Windows. An attacker could trick a user into clicking a malicious link, causing the application to load ...

CVE-2019-13637: Untrusted Search Path

In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a...

PT-2019-13457

Name of the Vulnerable Software and Affected Versions LogMeIn join.me versions prior to 3.16.0.5505 Description The issue arises from unsafe search paths used by the application URI defined in Windows, allowing an attacker to execute arbitrary commands on a targeted system. This can be exploited ...

GoTo LogMeIn Detection (Windows)

Binary data logmeinwindetect.nbin...

LogMeIn Client Installed (Windows)

Binary data logmeinclientwininstalled.nbin...

LogMeIn Control Panel Installed (Windows)

Binary data logmeincontrolpanelwininstalled.nbin...

secure.logmein.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-700058 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

learn.logmeininc.com XSS vulnerability

Open Bug Bounty ID: OBB-695720 Description| Value ---|--- Affected Website:| learn.logmeininc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hardcoded credentials

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...