Skip to content
OpenAdvisories

Product · Authenticator-Extension

Authenticator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-45394

    Secret encryption vulnerable to brute-force attacks

    Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVP_BytesToKey KDF. Therefore, attackers with a copy of a user…

    Authenticator-Extension Authenticator