PT-2017-7407
CVE-2015-8378
·
Publicado
2015-12-24
·
Atualizado
2017-04-15
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
KeePassX versions prior to 0.4.4
Description
The issue allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile, which contains a cleartext copy of password data created when an XML export action is cancelled.
Recommendations
For versions prior to 0.4.4, update to version 0.4.4 or later to resolve the issue. As a temporary workaround, consider avoiding the XML export action until the update is applied.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾