CVE Vulnerabilities

CVE-2022-4612

Insufficiently Protected Credentials

Published: Dec 19, 2022 | Modified: Dec 23, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-216274 is the identifier assigned to this vulnerability.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Passwordstate Clickstudios * 9.5 (excluding)
Passwordstate Clickstudios 9.5-build_9500 (including) 9.5-build_9500 (including)
Passwordstate Clickstudios 9.5-build_9512 (including) 9.5-build_9512 (including)
Passwordstate Clickstudios 9.5-build_9519 (including) 9.5-build_9519 (including)
Passwordstate Clickstudios 9.5-build_9531 (including) 9.5-build_9531 (including)
Passwordstate Clickstudios 9.5-build_9533 (including) 9.5-build_9533 (including)
Passwordstate Clickstudios 9.5-build_9535 (including) 9.5-build_9535 (including)
Passwordstate Clickstudios 9.5-build_9583 (including) 9.5-build_9583 (including)

Potential Mitigations

References