PT-2011-3402 · Passmanlite · Passmanlite Password Manager

Simon Roses · Published 2011-05-13 · Updated 2011-09-22 · CVE-2011-1840

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PassmanLite Password Manager version 1.47 and earlier

Description The issue allows local users to obtain sensitive information, including the master password and other account information, by leveraging shell access. This is because the application stores this information in cleartext.

Recommendations For versions 1.47 and earlier, update to version 1.48 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2011-1840

Affected Products

Passmanlite Password Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1840 · Security Note
• http://securityfocus.com/bid/47765 · Note
• http://securityreason.com/securityalert/8250 · Note
• http://simonroses.com/wp-content/uploads/2011/05/SRF-SA-2011-01.txt · Note