CVE-2022-25570: Clickstudios Passwordstate

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without permissions. Specifically, an authenticated user who has write permissions to a password list in one folder (with the default permission model) can extend his permissions to all other password lists in the same folder.

Affected products

• Clickstudios Passwordstate: version 9.4 only

Published 2022-03-21. Last modified 2026-06-17.