Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0221
HistoryJul 07, 2023 - 8:54 a.m.

Updated keepass packages fix security vulnerability

2023-07-0708:54:45
Gentoo Foundation
advisories.mageia.org
9
keepass
security
vulnerability
xml
configuration
cleartext passwords
export trigger
vendor
access
cve-2023-24055
master password
memory dump
workspace
locked
running
cve-2023-32784
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

55.6%

JSON

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. (CVE-2023-24055) Possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running (CVE-2023-32784)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchkeepass< 2.54-1keepass-2.54-1.mga8

Related

thn 1
openvas 2
vulnrichment 1
githubexploit 15
redos 2
cvelist 2
nvd 2
cve 2
nessus 2
prion 2
osv 1
debiancve 1
attackerkb 1
wizblog 1
malwarebytes 1
ubuntucve 1
ics 1
thn
thn
KeePass Exploit Allows Attackers to Recover Master Passwords from Memory
2023-05-22 06:33:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0221)
2023-07-10 00:00:00
openSUSE: Security Advisory for keepass (openSUSE-SU-2023:0157-1)
2024-03-04 00:00:00
vulnrichment
vulnrichment
CVE-2023-24055
2023-01-22 00:00:00
githubexploit
githubexploit
Exploit for Cleartext Storage of Sensitive Information in Keepass
2023-01-29 14:13:44
Exploit for Cleartext Storage of Sensitive Information in Keepass
2023-01-30 13:22:22
Exploit for Cleartext Storage of Sensitive Information in Keepass
2023-01-30 13:22:22
redos
redos
ROS-20240902-20
2024-09-02 00:00:00
ROS-20230911-02
2023-09-11 00:00:00
cvelist
cvelist
CVE-2023-24055
2023-01-22 00:00:00
CVE-2023-32784
2023-05-15 00:00:00
nvd
nvd
CVE-2023-24055
2023-01-22 04:15:11
CVE-2023-32784
2023-05-15 06:15:10
cve
cve
CVE-2023-24055
2023-01-22 04:15:11
CVE-2023-32784
2023-05-15 06:15:10
nessus
nessus
Keepass < 2.54 Information disclosure
2023-09-20 00:00:00
openSUSE 15 Security Update : keepass (openSUSE-SU-2023:0157-1)
2023-06-28 00:00:00
prion
prion
Design/Logic Flaw
2023-01-22 04:15:00
Design/Logic Flaw
2023-05-15 06:15:00
osv
osv
CVE-2023-32784
2023-05-15 06:15:10
debiancve
debiancve
CVE-2023-32784
2023-05-15 06:15:10
attackerkb
attackerkb
CVE-2023-32784
2023-05-15 00:00:00
wizblog
wizblog
Exploitable and unpatched KeePass vulnerability: everything you need to know
2023-05-23 13:49:01
malwarebytes
malwarebytes
KeePass vulnerability allows attackers to access the master password
2023-05-18 02:00:00
ubuntucve
ubuntucve
CVE-2023-32784
2023-05-15 00:00:00
ics
ics
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
2024-07-25 12:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

55.6%

JSON
Related for MGASA-2023-0221
thn1openvas2vulnrichment1githubexploit15redos2cvelist2nvd2cve2nessus2prion2osv1debiancve1attackerkb1wizblog1malwarebytes1ubuntucve1ics1