CVE-2019-10884

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains

published April 5, 2019

CVSS
—
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.7th percentile
Published
2019-04-05T16:45Z
EPSS history
Timeline
  • 05 APR 16:45Z
    Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains
    cvelistv5