4.3
CVSSv2

CVE-2022-28795

Published: 12/04/2022 Updated: 20/04/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then access this information via JavaScript. The issue was fixed with the browser extensions version 2.18.5 for Chrome, MS Edge, Opera, Firefox, and Safari.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

avira password manager 2.18.4

avira password manager 2.18.4.3847

avira password manager 2.18.4.3868

avira password manager 2.18.4.38471