Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8g3-hwcg-gr94

Опубликовано: 10 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.5
nvd
больше 3 лет назад

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-312