PT-2012-5482
CVE-2012-4571
·
Published
2012-11-30
·
Updated
2022-05-17
Description by
CVSS 4.0
8.8
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:P
Name of the Vulnerable Software and Affected Versions
Python Keyring version 0.9.1
Description
The issue arises from the insecure initialization of the cipher when encrypting passwords for
CryptedFileKeyring files. This makes it easier for local users to obtain passwords via a brute-force attack.Recommendations
For Python Keyring version 0.9.1, consider updating to a newer version that securely initializes the cipher for encrypting passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾