writeups.xyz / Bitwarden Heist - How To Break Into Password Vaults Without Using Passwords

Submitter : c2a

Date: 3 January 2024

Bounty : undisclosed

Vulnerabilities :

• Thick Client
• Insecure Storage of Sensitive Information
• Authentication Bypass

Programs :

• Bitwarden

Authors :

• RedTeam Pentesting (@RedTeamPT)

Link :
https://blog.redteam-pentesting.de/2024/bitwarden-heist/