3 matches found
CVE-2012-5577
CVE-2012-5577 affects the Python keyring library prior to 0.10, where keyring files were created with world-readable permissions. This is the concrete detail available across the connected sources; no additional exploit vectors, systems, or remediation steps are specified in the provided document...
CVE-2012-4571
Python Keyring 0.9.1 is affected by a weakness in how the encryption cipher is initialized for CryptedFileKeyring, enabling local users to recover passwords via brute force. The issue arises from insecure cipher initialization, not from remote access. Affected component: Python keyring library (C...
CVE-2012-5578
CVE-2012-5578 affects the Python keyring library. The vulnerability arises from insecure permissions on newly created keyring databases, which can allow world-readable files to be created. Underlying impact is confidential information exposure (partial confidentiality) if such files are accessibl...