Riskcovery

CVE-2022-28795

State
Published
Severity
Not scored
Published
Apr 12, 2022
Updated
Aug 3, 2024
Reserved
Apr 7, 2022

Read the record on cve.org

Description

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then access this information via JavaScript. The issue was fixed with the browser extensions version 2.18.5 for Chrome, MS Edge, Opera, Firefox, and Safari.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Avira Password Manager – Browser Extensionsn/a
  • Avira Password Manager - extension for ChromeAffected
  • version 2.18.4.3868 Avira Password Manager - extension for MS EdgeAffected
  • version 2.18.4.3847 Avira Password Manager - extension for OperaAffected
  • version 2.18.4.3847 Avira Password Manager - extension for FirefoxAffected
  • version 2.18.4.38471 Avira Password Manager - extension for SafariAffected
  • version 2.18.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.