CVE-2024-45833
Mobile password gets saved in dictionary under conditions
概要
Mobile password gets saved in dictionary under conditions
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character..
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com