PT-2017-7407
CVE-2015-8378
·
تاريخ النشر
2015-12-24
·
تاريخ التحديث
2017-04-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
KeePassX versions prior to 0.4.4
Description
The issue allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile, which contains a cleartext copy of password data created when an XML export action is cancelled.
Recommendations
For versions prior to 0.4.4, update to version 0.4.4 or later to resolve the issue. As a temporary workaround, consider avoiding the XML export action until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾