CVE-2023-47801

Summary

CVE-2023-47801 is a vulnerability affecting Click Studios Passwordstate versions prior to 9811. This issue enables Security Administrators with existing accounts to access and delete private password records using the System Wide API Key in conjunction with the PasswordHistory API endpoint. Furthermore, the Copy/Move Password Record API Key can be exploited to copy or move private password records, posing a significant data security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.