PT-2022-27737 · Click Studios · Click Studios Passwordstate Browser Extension Chrome+1

Constantin Müller + 2 · Published 2022-12-19 · Updated 2022-12-24 · CVE-2022-4610

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click Studios Passwordstate (affected versions not specified) Click Studios Passwordstate Browser Extension Chrome (affected versions not specified)

Description A problematic vulnerability has been found, affecting some unknown functionality. The manipulation leads to the use of a risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-310

Related Identifiers

CVE-2022-4610

Affected Products

Click Studios Passwordstate

Click Studios Passwordstate Browser Extension Chrome

References · 7

• 🔥 https://modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf · Exploit
• 🔥 https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html · Exploit
• https://osv.dev/vulnerability/CVE-2022-4610 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4610 · Security Note
• https://t.me/cvenotify/40564 · Telegram Post
• https://vuldb.com/?id.216272 · Note
• https://t.me/cibsecurity/54881 · Telegram Post