PT-2012-5482
CVE-2012-4571
·
تاريخ النشر
2012-11-30
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
8.8
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:P
Name of the Vulnerable Software and Affected Versions
Python Keyring version 0.9.1
Description
The issue arises from the insecure initialization of the cipher when encrypting passwords for
CryptedFileKeyring files. This makes it easier for local users to obtain passwords via a brute-force attack.Recommendations
For Python Keyring version 0.9.1, consider updating to a newer version that securely initializes the cipher for encrypting passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾