CVE-2017-18021 - It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords

Back Back to CVE browser

CRITICAL

It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords

Published Jan 5, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 2.36%

Description

It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-338

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-9161
Advisory
https://github.com/IJHack/QtPass/issues/338
x_refsource_MISCExploitThird Party Advisory
https://github.com/IJHack/QtPass/releases/tag/v1.2.1
x_refsource_MISCRelease NotesThird Party Advisory
https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html
x_refsource_MISCPatchThird Party Advisory
https://qtpass.org/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-9161		Advisory
https://github.com/IJHack/QtPass/issues/338		x_refsource_MISCExploitThird Party Advisory
https://github.com/IJHack/QtPass/releases/tag/v1.2.1		x_refsource_MISCRelease NotesThird Party Advisory
https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html		x_refsource_MISCPatchThird Party Advisory
https://qtpass.org/		x_refsource_MISCVendor Advisory