CVE:CVE-2022-32550
CNNVD:CNNVD-202206-1509
AgileBits 1Password是加拿大AgileBits公司的一套跨平台账号密码管理工具。
AgileBits 1Password存在安全漏洞。攻击者利用该漏洞说服 1Password 应用程序与 1Password 服务通信。
solution:Upgrade 1password 1password to a higher version than 7.9.3,7.9.5,7.9.6,7.9.829,8.7.1,8.8.0-94,8.8.0-104,and avoid the version [7.0,7.9.3),[7.0,7.9.5),[7.0,7.9.6),[7.0,7.9.829),[8.0,8.7.1),[8.0,8.8.0-94),[8.0,8.8.0-104); Upgrade 1password 1password_in_the_browser to a higher version than 2.3.4,and avoid the version (,2.3.4); Upgrade 1password command-line to a higher version than 1.12.5,2.3.0,and avoid the version [1.0.0,1.12.5),[2.0.0,2.3.0); Upgrade 1password connect to a higher version than 1.5.3,and avoid the version (,1.5.3); Upgrade 1password scim_bridge to a higher version than 2.3.2,and avoid the version (,2.3.2)