CVE-2020-35208

** DISPUTED ** An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices.

CVSS v3 5.7 MEDIUM
CVSS v2.0 3.3 LOW

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.5 / Impact : 5.2

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.3^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 3.4 / Impact : 4.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/evilblazer/LastPassVulnerabilities	Exploit Third Party Advisory
https://youtu.be/63PfHVSr8iw	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:logmein:lastpass:4.8.11.2403:*:*:*:*:iphone_os:*:*

History

No history.

Information

Published : 2020-12-12 19:15

Updated : 2024-08-04 17:15

NVD link : CVE-2020-35208

Mitre link : CVE-2020-35208

CVE.ORG link : CVE-2020-35208

JSON object : View

Products Affected

logmein

lastpass

CWE

CWE-287

Improper Authentication

{"id": "CVE-2020-35208", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 0.5}]}, "published": "2020-12-12T19:15:11.730", "references": [{"url": "https://github.com/evilblazer/LastPassVulnerabilities", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://youtu.be/63PfHVSr8iw", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices"}, {"lang": "es", "value": "** EN DISPUTA ** Se detect\u00f3 un problema en la aplicaci\u00f3n LogMein LastPass Password Manager (tambi\u00e9n se conoce como com.lastpass.ilastpass) versi\u00f3n 4.8.11.2403 para iOS. La autenticaci\u00f3n de contrase\u00f1a para el desbloqueo se puede omitir forzando a que el resultado de la autenticaci\u00f3n sea verdadero por medio de la manipulaci\u00f3n del tiempo de ejecuci\u00f3n. En otras palabras, un atacante podr\u00eda autenticarse con una contrase\u00f1a arbitraria. NOTA: el proveedor ha indicado que este no es un ataque de inter\u00e9s dentro del contexto de su modelo de amenaza, que excluye los dispositivos con jailbreak"}], "lastModified": "2024-08-04T17:15:55.403", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:logmein:lastpass:4.8.11.2403:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "B0EB5423-CBD2-4536-9DA3-A31A00791AA4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}