CVE-2020-11826

Name of the Vulnerable Software and Affected Versions Memono version 3.8

Description The issue allows an attacker to access password-protected notes without knowing the password. This is because the notes are stored in the database, specifically in the ZENTITY table of the memono.sqlite database, without encryption.

Recommendations For Memono version 3.8, consider encrypting the notes stored in the ZENTITY table of the memono.sqlite database to prevent unauthorized access. As a temporary workaround, restrict access to the memono.sqlite database to minimize the risk of exploitation.