Medium WID-SEC-2024-1183 2 CVEs

KeePass: Mehrere Schwachstellen ermöglichen die Offenlegung von Informationen

Published May 20, 2024 · Updated May 20, 2024 · de-DE

Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in KeePass ausnutzen, um vertrauliche Informationen offenzulegen.

Product

KeePass ist ein Open Source Passwortmanager.

Vulnerabilities 2

Medium 6.5

CVE-2024-33900

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory…

May 20, 2024
Medium 6.5

CVE-2024-33901 Public exploit

Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in …

May 20, 2024

Revision history

2024-05-20 #1
Initiale Fassung

References

GitHub Advisory GHSA-c45j-7735-f4r2 vom 2024-05-20
https://github.com/advisories/GHSA-c45j-7735-f4r2
GitHub Advisory GHSA-g437-xqhv-c7mq vom 2024-05-20
https://github.com/advisories/GHSA-g437-xqhv-c7mq
KeePassXC Release 2.7.8 vom 2024-05-20
https://keepassxc.org/blog/2024-05-06-2.7.8-released/