PT-2022-13391 · Keepass · Keepass

Sandipan Roy + 1 · Published 2022-03-07 · Updated 2022-10-28 · CVE-2022-0725

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions KeePass (affected versions not specified)

Description A flaw in KeePass leads to an Information Exposure issue due to the logging of plain text passwords in the system log. This allows an attacker to interact with and read sensitive passwords and logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-200

CWE-532

Related Identifiers

CVE-2022-0725

Affected Products

Keepass

References · 10

• 🔥 https://github.com/ByteHackr/keepass_poc · Exploit
• https://cve.org/CVERecord?id=CVE-2022-0725 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0725 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0725 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0725 · Security Note
• https://sourceforge.net/p/keepass/discussion/329220/thread/33d6afdc · Note
• https://t.me/cibsecurity/38651 · Telegram Post
• https://sourceforge.net/p/keepass/discussion/329220/thread/da7546b7e1 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2052696 · Note