Authenticator-Extension vulnerabilities
We track 1 vulnerability in Authenticator-Extension products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2024.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Authenticator-Extension vulnerabilities
- 7.8 High severity
Authenticator: Inadequate Encryption Strength
Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVP_BytesToKey KDF. Therefore, attackers with a copy of a user'