PT-2024-28455 · Click Studios · Passwordstate Core

Published 2024-06-23 · Updated 2025-08-31 · CVE-2024-39337

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Click Studios Passwordstate Core versions prior to 9.8 build 9858

Description The issue allows for authentication bypass.

Recommendations For versions prior to 9.8 build 9858, update to version 9.8 build 9858 or later to resolve the issue.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2024-39337

Affected Products

Passwordstate Core

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-39337 · Security Note
• https://t.me/cvenotify/84131 · Telegram Post
• https://twitter.com/RedTeamNewsBlog/status/1961106614208823563 · Twitter Post
• https://clickstudios.com.au/passwordstate-changelog.aspx · Note
• https://twitter.com/cybertzar/status/1962085086192443828 · Twitter Post
• https://twitter.com/DailyDataDosee/status/1961452796693336100 · Twitter Post
• https://clickstudios.com.au/security/advisories · Note