Exploit / PoCmedium
KeePass Exploit Allows Attackers to Recover Master Passwords from Memory
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-24055 | KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by… | 5.5 | 4% | ||
| CVE-2023-32784 | In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running | 7.5 | 4% | PoC |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan May 22, 2023 Password Security / Exploit A proof-of-concept (PoC) has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784 , impacts KeePass versions 2. x for Windows, Linux, and macOS, and is expected to be patched in version 2.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.