Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
References
Configurations
No configuration.
History
21 Nov 2024, 09:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 - | |
| References | () https://github.com/keepassxreboot/keepassxc/issues/10784 - | |
| References | () https://keepassxc.org/blog/ - | |
| References | () https://keepassxc.org/blog/2019-02-21-memory-security/ - |
01 Aug 2024, 13:52
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-316 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
29 Jul 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
21 May 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs. | |
| References |
|
20 May 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-20 21:15
Updated : 2024-11-21 09:17
NVD link : CVE-2024-33901
Mitre link : CVE-2024-33901
CVE.ORG link : CVE-2024-33901
JSON object : View
Products Affected
No product.
CWE
CWE-316
Cleartext Storage of Sensitive Information in Memory