PT-2012-5482
CVE-2012-4571
·
Publicado
2012-11-30
·
Atualizado
2022-05-17
Descrição por
CVSS 4.0
8.8
AltaMétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:P
Name of the Vulnerable Software and Affected Versions
Python Keyring version 0.9.1
Description
The issue arises from the insecure initialization of the cipher when encrypting passwords for
CryptedFileKeyring files. This makes it easier for local users to obtain passwords via a brute-force attack.Recommendations
For Python Keyring version 0.9.1, consider updating to a newer version that securely initializes the cipher for encrypting passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾