Vulnerabilities

TI-2020-17888 CVE-2020-35207 · GHSA-2qrc-66qm-fhmc

An issue was discovered in the LogMein LastPass Password Manager (aka…

LOW 26

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.

CVSS 3.1MEDIUM 5.7 Physical No auth No interaction EPSS 0.00476 Published 2020-12-12 No fix listed CWE-287

TI-2020-17889 CVE-2020-35208 · GHSA-4873-28g6-ccxv

An issue was discovered in the LogMein LastPass Password Manager (aka…

LOW 28

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS.

CVSS 3.1MEDIUM 5.7 Physical No auth No interaction EPSS 0.0048 Published 2020-12-12 No fix listed CWE-287

TI-2013-04438 CVE-2013-5113 · GHSA-3mm6-mv5c-6hfv

LastPass prior to 2.5.1 has an insecure PIN implementation.

LOW 31

LastPass prior to 2.5.1 has an insecure PIN implementation.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00586 Published 2020-01-31 No fix listed CWE-522

TI-2013-04439 CVE-2013-5114 · GHSA-7jv7-x5qh-84x2

LastPass prior to 2.5.1 allows secure wipe bypass.

LOW 28

LastPass prior to 2.5.1 allows secure wipe bypass.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00585 Published 2020-01-31 No fix listed CWE-287

TI-2019-12312 CVE-2019-16371 · GHSA-36f7-g2v6-4rj3

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that…

LOW 38

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjac…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.0118 Published 2019-09-16 No fix listed CWE-1021

TI-2018-07226 CVE-2018-10193 · GHSA-ppwr-3qv2-m3pp

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service…

MEDIUM 40

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04671 Published 2018-04-18 No fix listed CWE-400

Vulnerabilities

Filters

An issue was discovered in the LogMein LastPass Password Manager (aka…

An issue was discovered in the LogMein LastPass Password Manager (aka…

LastPass prior to 2.5.1 has an insecure PIN implementation.

LastPass prior to 2.5.1 allows secure wipe bypass.

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that…

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service…