Lucene search

K
redosRedosROS-20230911-02
HistorySep 11, 2023 - 12:00 a.m.

ROS-20230911-02

2023-09-1100:00:00
redos.red-soft.ru
6
keepass
password manager
vulnerability
remote recovery
master password
plaintext

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.3%

Vulnerability of the KeePass password manager password text field is related to storing credentials
in unencrypted form. Exploitation of the vulnerability could allow an attacker acting remotely,
to recover the master password in plaintext.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64keepass<= 2.54-1UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.3%