Description
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Advisories 1
- WID-SEC-2024-1183 KeePass: Mehrere Schwachstellen ermöglichen die Offenlegung von Informationen BSI CERT-Bund (WID) · May 20, 2024