Описание
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Ссылки
- Exploit
- Issue Tracking
- Release Notes
- Product
- Exploit
- Issue Tracking
- Release Notes
- Product
Уязвимые конфигурации
EPSS
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
KeePassXC 2.7.7 allows an attacker (who has the privileges of the vict ...
KeePassXC 2.7.7 allows attackers to recover cleartext credentials.
ALT-PU-2024-18233: package `keepassxc` update to version 2.7.8-alt1
EPSS
6.5 Medium
CVSS3