PT-2019-12997 · Bcn Quark · Bcn Quark Quarking Password Manager

Gionreale · Publicado 2019-06-24 · Atualizado 2020-08-24 · CVE-2019-12880

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BCN Quark Quarking Password Manager version 3.1.84

Description The issue is caused by allowing * within web accessible resources, which leads to a clickjacking vulnerability. An attacker can exploit this to cause significant harm.

Recommendations For BCN Quark Quarking Password Manager version 3.1.84, consider restricting access to web accessible resources to prevent clickjacking attacks until a patch is available.

Correção

Clickjacking

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

CVE-2019-12880

Produtos afetados

Bcn Quark Quarking Password Manager

Referências · 5

• http://packetstormsecurity.com/files/153405/Quarking-Password-Manager-3.1.84-Clickjacking.html · Nota
• http://seclists.org/fulldisclosure/2019/Jun/31 · Nota
• https://chrome.google.com/webstore/detail/quarking-password-manager/gfkmpfajamepgekgohcdnjogmeamcdmm?hl=en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12880 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12880 · Nota de Segurança