Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:56 a.m.7 views

CVE-2023-24055

KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has...

5.5CVSS6.8AI score0.41441EPSS
Exploits2References1
Mageia
Mageia
added 2023/07/07 5:54 a.m.23 views

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

7.5CVSS7.1AI score0.76477EPSS
Exploits7References2
VulnCheck KEV
VulnCheck KEV
added 2023/04/24 12:0 a.m.0 views

VulnCheck KEV: CVE-2023-24055

KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who...

5.5CVSS6.2AI score0.41441EPSS
Exploits2References1
OSV
OSV
added 2023/01/22 4:15 a.m.1 views

CVE-2023-24055

KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has...

5.5CVSS6.4AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/01/22 4:15 a.m.0 views

CVE-2023-24055

KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has...

5.5CVSS5.9AI score0.41441EPSS
Exploits2References4
Prion
Prion
added 2023/01/22 4:15 a.m.11 views

Design/Logic Flaw

DISPUTED KeePass through 2.53 in a default installation allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker...

1.9CVSS5.7AI score0.41441EPSS
Exploits2References3Affected Software1
CNNVD
CNNVD
added 2023/01/22 12:0 a.m.3 views

KeePass 安全漏洞

KeePass is an open source password manager. A security vulnerability exists in KeePass version 2.53 and earlier versions. An attacker exploited the vulnerability to obtain plaintext passwords by adding an export trigger...

5.5CVSS6.1AI score0.41441EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2022/12/09 12:0 a.m.2 views

PT-2022-7125 · Keepass +2 · Keepass +3

Name of the Vulnerable Software and Affected Versions: KeePass versions 2.53 and earlier KeePass through 2.53 in a default installation Description: The issue is related to the storage of critical information in an unencrypted manner. An attacker with write access to the XML configuration file ca...

7.5CVSS9.4AI score0.76477EPSS
Exploits7References46
Rows per page
Query Builder