Skip to content
OpenAdvisories
Unscored CVE-2019-10884 EUVD-2019-2606GHSA-25x6-6mr7-9jx8

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vu…

Published Apr 5, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security.

References