CVE-2022-0916 — Broken authentication on Logitech Options due to misvalidation of Oauth state parameter

CVE-2022-0916

Broken authentication on Logitech Options due to misvalidation of Oauth state parameter PUBLISHED

Description (CNA)

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Affected (CNA)

Vendor / product	Versions
Logitech / Options	affected 9.60.87 before 9.60.87

CWE

CWE-287

References

https://support.logi.com/hc/en-us/articles/360025297893

ADP enrichment

CVE

No English description supplied.

https://support.logi.com/hc/en-us/articles/360025297893