CVE-2024-39846

2024-06-2921:15:09

Google

osv.dev

newpass

vulnerability

password storage

sensitive information

data encryption

AI Score

6.7

Confidence

Low

JSON

NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use.