HIGH
A flaw was found in keepass
Published Mar 7, 2022
7.5
HIGHCVSS 3.1
EPSS 2.45%
Description
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
Affected products
- Vendor n/a Product Keepass Defaultn/a
- Version no fix availableStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Keepass | n/a |
|
Configuration 2
OR
- 7.0
- 35
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (2)
- https://bugzilla.redhat.com/show_bug.cgi?id=2052696 x_refsource_MISCIssue TrackingThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15794 Advisory
| Link | Providers | Tags |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2052696 | x_refsource_MISCIssue TrackingThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15794 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 7, 2022
Updated Aug 2, 2024
Reserved Feb 22, 2022
Link CVE-2022-0725
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2022-15794 Assigner redhat
Published Mar 7, 2022
Updated Aug 2, 2024
Exploited since n/a
Link EUVD-2022-15794