Lucene search
MitreCVELIST:CVE-2023-32784HistoryMay 15, 2023 - 12:00 a.m.
CVE-2023-32784
2023-05-1500:00:00
mitre
www.cve.org
4
keepass
master password
memory dump
cleartext
cve-2023-32784
mitigation
EPSS
0.002
Percentile
55.1%
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.
Related
githubexploit
githubexploit
Exploit for Cleartext Transmission of Sensitive Information in Keepass
2023-05-01 17:08:55
Exploit for Cleartext Transmission of Sensitive Information in Keepass
2023-05-23 20:02:22
Exploit for Cleartext Transmission of Sensitive Information in Keepass
2023-05-20 14:37:00
cve
cve
CVE-2023-32784
2023-05-15 06:15:10
nessus
nessus
Keepass < 2.54 Information disclosure
2023-09-20 00:00:00
openSUSE 15 Security Update : keepass (openSUSE-SU-2023:0157-1)
2023-06-28 00:00:00
nvd
nvd
CVE-2023-32784
2023-05-15 06:15:10
osv
osv
CVE-2023-32784
2023-05-15 06:15:10
redos
redos
ROS-20230911-02
2023-09-11 00:00:00
attackerkb
attackerkb
CVE-2023-32784
2023-05-15 00:00:00
debiancve
debiancve
CVE-2023-32784
2023-05-15 06:15:10
prion
prion
Design/Logic Flaw
2023-05-15 06:15:00
openvas
openvas
openSUSE: Security Advisory for keepass (openSUSE-SU-2023:0157-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2023-0221)
2023-07-10 00:00:00
wizblog
wizblog
Exploitable and unpatched KeePass vulnerability: everything you need to know
2023-05-23 13:49:01
malwarebytes
malwarebytes
KeePass vulnerability allows attackers to access the master password
2023-05-18 02:00:00
ubuntucve
ubuntucve
CVE-2023-32784
2023-05-15 00:00:00
mageia
mageia
Updated keepass packages fix security vulnerability
2023-07-07 08:54:45
thn
thn
KeePass Exploit Allows Attackers to Recover Master Passwords from Memory
2023-05-22 06:33:00
