Lucene search
GoogleOSV:CVE-2020-16272HistoryAug 03, 2020 - 5:15 p.m.
CVE-2020-16272
2020-08-0317:15:12
Google
osv.dev
3
The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database via an A=0 WebSocket connection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| keepassrpc | eq | 1.11.0 | |
| keepassrpc | eq | 1.7.3 | |
| keepassrpc | eq | 1.8.0 | |
| keepassrpc | eq | 1.9.0 | |
| keepassrpc | eq | 1.10.0 |
Related
cve
cve
CVE-2020-16272
2020-08-03 17:15:12
prion
prion
Input validation
2020-08-03 17:15:00
nvd
nvd
CVE-2020-16272
2020-08-03 17:15:12
cvelist
cvelist
CVE-2020-16272
2020-08-03 16:19:11