PT-2022-27737

CVE-2022-4610

Published

2022-12-19

Updated

2022-12-24

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click Studios Passwordstate (affected versions not specified) Click Studios Passwordstate Browser Extension Chrome (affected versions not specified)

Description A problematic vulnerability has been found, affecting some unknown functionality. The manipulation leads to the use of a risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Constantin Müller

Jan Benninger

Pascal Zenker

Vendors

Affected products

Weakness enumeration

CWE-327: Use of a Broken or Risky Cryptographic Algorithm