{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-4610", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "assignerShortName": "VulDB", "dateUpdated": "2022-12-19T00:00:00", "dateReserved": "2022-12-19T00:00:00", "datePublished": "2022-12-19T00:00:00"}, "containers": {"cna": {"title": "Click Studios Passwordstate risky encryption", "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2022-12-19T00:00:00"}, "descriptions": [{"lang": "en", "value": "A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272."}], "affected": [{"vendor": "Click Studios", "product": "Passwordstate", "versions": [{"version": "n/a", "status": "affected"}]}, {"vendor": "Click Studios", "product": "Passwordstate Browser Extension Chrome", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html"}, {"url": "https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf"}, {"url": "https://vuldb.com/?id.216272"}], "credits": [{"lang": "en", "value": "Constantin M\u00fcller/Jan Benninger/Pascal Zenker"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "baseSeverity": "LOW"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-310 Cryptographic Issues -> CWE-327 Risky Cryptographic Algorithm", "cweId": "CWE-310"}]}], "x_generator": "vuldb.com"}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:clickstudios:passwordstate:*:*:*:*:*:*:*:*", "matchCriteriaId": "33EF0704-7BE3-48EB-8F0A-02101FBA158C", "versionEndExcluding": "9.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9500:*:*:*:-:*:*", "matchCriteriaId": "53FFDC0B-0F74-494D-9CBE-2DAC27B040EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9512:*:*:*:-:*:*", "matchCriteriaId": "86308402-59E4-4F27-BF2B-B5C3E4DC4A95", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9519:*:*:*:-:*:*", "matchCriteriaId": "7B3EBBD3-EBFF-4A7E-9425-1DCF431DE4F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9531:*:*:*:-:*:*", "matchCriteriaId": "D4BB7778-9669-43A2-9E72-7EE2CC8EDB51", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9533:*:*:*:-:*:*", "matchCriteriaId": "5E41BACC-4F74-4A9A-9C8B-B1FF661B3B70", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9535:*:*:*:-:*:*", "matchCriteriaId": "B0EFF8C9-3F2C-454E-811D-257FA41C6CDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5:build_9583:*:*:*:-:*:*", "matchCriteriaId": "C0B5D5D0-3DEC-4492-BED9-C5267C4BA281", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:clickstudios:passwordstate:9.5.8.4:*:*:*:*:chrome:*:*", "matchCriteriaId": "8CFF9226-D49B-42F9-A553-B3F6FD8413C3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272."}, {"lang": "es", "value": "Una vulnerabilidad clasificada como problem\u00e1tica ha sido encontrada en Click Studios Passwordstate y Passwordstate Browser Extension Chrome. Una funci\u00f3n desconocida es afectada por este problema. La manipulaci\u00f3n conduce a un algoritmo criptogr\u00e1fico arriesgado. Se requiere acceso local para abordar este ataque. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. El identificador de esta vulnerabilidad es VDB-216272."}], "id": "CVE-2022-4610", "lastModified": "2023-11-07T03:58:20.673", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}]}, "published": "2022-12-19T15:15:10.247", "references": [{"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "https://vuldb.com/?id.216272"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-327"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-310"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}