6.5

CVE-2022-28795

EPSS 1.01%
Veröffentlicht 12.04.2022 17:15:10
Zuletzt bearbeitet 21.11.2024 06:57:57
Erkennungen
Login

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then access this information via JavaScript. The issue was fixed with the browser extensions version 2.18.5 for Chrome, MS Edge, Opera, Firefox, and Safari.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Avira ≫ Password Manager Version 2.18.4 SwPlatform safari

Avira ≫ Password Manager Version 2.18.4.3847 SwPlatform edge

Avira ≫ Password Manager Version 2.18.4.3847 SwPlatform opera

Avira ≫ Password Manager Version 2.18.4.3868 SwPlatform chrome

Avira ≫ Password Manager Version 2.18.4.38471 SwPlatform firefox

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.01%	0.598

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://support.norton.com/sp/static/external/tools/security-advisories.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-28795

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-28795

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-28795

EUVD