An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this…

Description

An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent, manipulated by remote servers. This pop-up window will stay on any page the user visits within the browser until a decision is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear, stopping users from securing their credentials. This vulnerability is related to id="uniqkey-password-popup" and password-popup/popup.html, but is a different vulnerability than CVE-2019-10676.

Scores

EPSS (exploitation in 30 days)

2.5% · top 15% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (3)

• 20190405 Uniqkey Password Manager 1.14 - Remote Denial Of Service [CVE-2019-10845] (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• https://vuldb.com/?id.132960 (opens in a new tab)x_refsource_MISCx_transferred
• http://packetstormsecurity.com/files/152452/Uniqkey-Password-Manager-1.14-Denial-Of-Service.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-10845](https://trackcve.app/badge/CVE-2019-10845.svg)](https://trackcve.app/cve/CVE-2019-10845)

Record last updated 4 Aug 2024, 22:32 UTC.