CVE-2024-45833

CWE-6933 documents3 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 54.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mattermost Mattermost MobileMattermost Mattermost
Timeline
PublishedSep 16

Description

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character..

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:NExploitability: 0.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5mattermost/mattermost2.18.0

🔴Vulnerability Details

2
GHSA
GHSA-fq8w-cfr6-8fqg: Mattermost Mobile Apps versions <=2↗2024-09-16
▶
CVEList
Mobile password gets saved in dictionary under conditions↗2024-09-16
▶
CVE-2024-45833 (MEDIUM CVSS 6.5) | Mattermost Mobile Apps versions <=2 | cvebase.io