CVE-2018-19863: Medium severity 1password vulnerability
An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from Safari to 1Password could be logged locally on the user's machine. This data could include usernames and passwords that a user manually entered into Safari.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19863?
CVE-2018-19863 is considered a high severity vulnerability due to the potential exposure of sensitive data like usernames and passwords.
How do I fix CVE-2018-19863?
To fix CVE-2018-19863, you should update your 1Password application to version 7.2.3.BETA-3 or later.
What versions of 1Password are affected by CVE-2018-19863?
CVE-2018-19863 affects 1Password versions 7.2.3 BETA-0, BETA-1, and BETA-2 on macOS.
Can CVE-2018-19863 expose my saved passwords?
Yes, CVE-2018-19863 can log sensitive data including saved passwords, potentially exposing them to local access.
Is CVE-2018-19863 specific to macOS?
Yes, CVE-2018-19863 specifically affects the macOS version of the 1Password application.