PT-2023-3057 · Keepass+3 · Keepass+4

Vdohney · Published 2023-05-15 · Updated 2026-05-07 · CVE-2023-32784

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions KeePass versions prior to 2.54

Description An issue exists in the password manager's password input text field where credentials may be stored in unencrypted form. This could allow a remote attacker to recover the master password in cleartext. Additionally, there is a need for improved process memory protection of secure edit controls.

Recommendations Update to version 2.54.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

ALT-PU-2023-2101

ALT-PU-2023-4128

ALT-PU-2023-5166

ALT-PU-2024-12934

ALT-PU-2025-2135

BDU:2023-03124

CVE-2023-32784

MGASA-2023-0221

OPENSUSE-SU-2023:0157-1

OPENSUSE-SU-2023:0163-1

OPENSUSE-SU-2024:12982-1

Affected Products

Alt Linux

Debian

Keepass

Keepass2

Red Os

References · 58

• 🔥 https://github.com/vdohney/keepass-password-dumper · Exploit
• 🔥 https://github.com/z-jxy/keepass_dump · Exploit
• 🔥 https://github.com/und3sc0n0c1d0/BruteForce-to-KeePass · Exploit
• 🔥 https://github.com/mister-turtle/cve-2023-32784 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2023:0157-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32784 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-32784 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12982-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0221.html · Security Note
• https://ubuntu.com/security/CVE-2023-32784 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-32784 · Security Note
• https://bdu.fstec.ru/vul/2023-03124 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32784 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32784 · Vendor Advisory