CVE-2013-5113

MEDIUM

LastPass <2.5.1 - Info Disclosure

Title source: llm

Description

LastPass prior to 2.5.1 has an insecure PIN implementation.

Scores

CVSS v3 6.8
EPSS 0.0012
EPSS Percentile 30.5%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-522
Status published

Affected Products (1)

logmein/lastpass < 2.5.1

Timeline

Published Jan 31, 2020
Tracked Since Feb 18, 2026