PT-2024-2341 · Google+1 · Google Chrome+1

Efstratios Chatzoglou + 2 · Published 2024-03-18 · Updated 2024-03-26 · CVE-2023-23349

Positive Technologies (AI Summary)

CVSS v3.1

2.2

Low

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Password Manager versions prior to 24.0.0.427

Description The issue is related to the recovery of auto-filled credentials from a memory dump when the Kaspersky Password Manager extension for Google Chrome is used. An attacker must trick a user into visiting a login form of a website with saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.

Recommendations For Kaspersky Password Manager versions prior to 24.0.0.427, update to the latest version as soon as possible to resolve the issue. As a temporary workaround, consider disabling the KPM extension for Google Chrome until the update is applied. Restrict access to sensitive information and avoid using the autofill feature in Google Chrome until the issue is resolved.

Fix

Weakness Enumeration

CWE-316

Related Identifiers

BDU:2024-02289

CVE-2023-23349

Affected Products

Google Chrome

Kaspersky Password Manager

References · 11

• https://bdu.fstec.ru/vul/2024-02289 · Security Note
• https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23349 · Security Note
• https://t.me/cvenotify/74467 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1771246128299721113 · Twitter Post
• https://tenable.com/cve/CVE-2023-23349 · Note
• https://twitter.com/CyberHatOnline/status/1771915953837879447 · Twitter Post
• https://twitter.com/CVEnew/status/1771215133039300731 · Twitter Post
• https://twitter.com/oktsec/status/1772670312049459439 · Twitter Post
• https://twitter.com/RedPacketSec/status/1771479579678433663 · Twitter Post
• https://github.com/advisories/GHSA-m882-67h5-2g42 · Note