Описание
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dropbox:dropbox:71.4.108.0:*:*:*:*:desktop:*:*
EPSS
Процентиль: 31%
0.00119
Низкий
7.8 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-312
Связанные уязвимости
github
больше 3 лет назад
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
EPSS
Процентиль: 31%
0.00119
Низкий
7.8 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-312