Approved changes feed: RSS · Atom

cpe:2.3:a:logmein:lastpass:4.8.11.2403:*:*:*:*:iphone_os:*:*

part: a version: 4.8.11.2403 update: *

VendorLogmein (2f58eb62-d38f-5ad6-8a1c-44e173b99e72)
ProductLastpass (f9da4553-4c6a-5c65-b186-ae6464f45764)
Edition*
Language*
Software edition*
Target softwareiphone_os
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35208 vulnerable 2026-06-08 05:25:00.953217 Details available
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
Published: 2020-12-12T18:07:35.000Z
Updated: 2024-11-15T15:32:47.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35207 vulnerable 2026-06-08 05:25:00.952585 Details available
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary PIN. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
Published: 2020-12-12T18:07:51.000Z
Updated: 2024-08-04T17:02:07.022Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.