PT-2024-25957 · Mateso · Mateso Passwordsafe

Dr. Dominic Welsch · Published 2024-05-06 · Updated 2024-07-03 · CVE-2024-34538

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mateso PasswordSafe versions 8.13.9.26689 and earlier

Description The issue is related to weak cryptography. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions 8.13.9.26689 and earlier, update to a version that addresses the weak cryptography issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2024-34538

Affected Products

Mateso Passwordsafe

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-34538 · Security Note
• https://twitter.com/CVEnew/status/1787510885000339649 · Twitter Post
• https://hansesecure.de/2023/02/schwachstelle-in-passwordsafe-mateso · Note
• https://t.me/cvenotify/79185 · Telegram Post