We truly value the important work that the security research community provides. Please note that the reported issues only affected the LastPass Firefox extension versions between 4.0 and 4.1.21 and did not affect the LastPass extension version 3.3.1 available in the Mozilla Addons store at .Īgain, we thank Palant for his responsible disclosure and for working with our team to make LastPass even stronger and more secure.
FIREFOX LASTPASS UPDATE
The latest update is currently available on our downloads page. I had been successfully using LastPass (v 4.1.62, installed from Firefox's 'add-ons' panel) with Firefox (v 54.0.1). If LastPass works properly with other browsers commonly in use, and fails to work with Firefox, identifying the source of the problem is obvious. No action should be needed, but you can check to see if you are running the latest version by clicking on the LastPass Icon > Tools > About. The problem is with Firefox, not with LastPass. We have no evidence of these vulnerabilities being exploited, and we quickly issued fixes to address Palant’s concerns.įirefox users have received the automatic update to version 4.1.26 with the fix. Thats why the University provides LastPass Personal Premium to all. The message passing vulnerability could potentially be exploited by luring a LastPass user on Firefox to a malicious website and then tricking the LastPass extension into executing actions in the background without the user’s knowledge. Creating strong, unique passwords for all your personal and work accounts is tough. While the URL parsing issues could not be exploited, we did improve upon our design per the recommendations Palant provided. Palant approached specifically to point out potential vulnerabilities with our URL parsing and message passing. This update was in response to recommendations provided by Wladimir Palant, a security researcher and maker of the popular Firefox addon AdBlock Plus, who approached us shortly after a previous security report. Today, we have a security update regarding previous fixes to the LastPass Firefox extension.
Security remains our highest priority here at LastPass, including quickly responding to and fixing reports of bugs or vulnerabilities. LastPass stores your passwords inside a virtual vault on the cloud using 2-factor authentication on iron-clad and highly encrypted servers.
0 kommentar(er)
