Lucene search

MitreCVE-2022-42955

HistoryNov 07, 2022 - 1:15 p.m.

CVE-2022-42955

2022-11-0713:15:10

CWE-312

mitre

web.nvd.nist.gov

passwork

extension

chrome

browsers

cve-2022-42955

security vulnerability

cleartext cached credentials

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.

Affected configurations

Nvd

Node

passworkpassworkMatch5.0.9

VendorProductVersionCPE
passworkpasswork5.0.9cpe:2.3:a:passwork:passwork:5.0.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
passwork	passwork	5.0.9	cpe:2.3:a:passwork:passwork:5.0.9:::::::*

References

chrome.google.com/webstore/detail/passwork-self-hosted/ibiipnmmlnehmeonnhbdajcfagcgihkl

passwork.canny.io/changelog/version-5110

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

Related for CVE-2022-42955