SynScan
Home
How it works
Pricing
Vulnerability Database
Breach Intelligence
Search Data
Database Index
Contact
Try it now!
CVE-2013-5113
Last update: Apr 13, 2023
Description
LastPass prior to 2.5.1 has an insecure PIN implementation.
Affected Software
References
Software
From
Fixed in
logmein / lastpass
-
2.5.1
http://blog.c22.cc/2013/09/05/a-sneak-peak-into-android-secure-containers-2/
https://blog.c22.cc/advisories/cve-2013-51135114-lastpass-android-container-pin-and-auto-wipe-security-feature-bypass/
https://www.securityfocus.com/archive/1/529783
Details
Severity:
Medium
CVE:
CVE-2013-5113
Published:
Jan 31, 2020
Updated:
Apr 13, 2023
Exploit:
CVSS v3
Severity:
Medium
Score
: 6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
Severity:
Low
Score:
1.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWEs
CWE-522
OWASP TOP 10
A2 - Broken Authentication