PT-2024-12340 · Keepass · Keepass

Published

2024-08-02

·

Updated

2024-10-19

·

CVE-2023-3278

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions KeePass (affected versions not specified)
Description The issue concerns a vulnerability in KeePass, which can be exploited by attackers. The vulnerability is related to XOR encryption and can be used to gain unauthorized access. There have been reports of this vulnerability being exploited in the wild, with threat actors such as Blackjack and C0met using tools like Facefish, Lockbit, and Anydesk tool to carry out attacks. The estimated number of potentially affected devices is not available.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-3278

Affected Products

Keepass