CVE-2024-45833: Mobile password gets saved in dictionary under conditions

First published: Mon Sep 16 2024(Updated: )

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character..

Credit: responsibledisclosure@mattermost.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/remedy
• agent/references
• agent/title
• agent/weakness
• agent/first-publish-date
• agent/type
• agent/description
• agent/author
• agent/event
• collector/mitre-cve
• source/MITRE
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/severity
• agent/softwarecombine
• agent/tags
• vendor/mattermost
• canonical/mattermost mattermost mobile