PT-2022-27754

CVE-2022-4613

Published

2022-12-19

Updated

2023-06-23

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click Studios Passwordstate (affected versions not specified) Click Studios Passwordstate Browser Extension Chrome (affected versions not specified)

Description A critical issue affects the Browser Extension Provisioning component, leading to improper authorization. The attack can be initiated remotely. It is estimated that an unknown number of devices may be affected.

Recommendations To resolve the issue, upgrade the affected component. As a temporary workaround, consider restricting access to the Browser Extension Provisioning component until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Constantin Müller

Jan Benninger

Pascal Zenker

Vendors

Affected products

Weakness enumeration

CWE-266: Incorrect Privilege Assignment