PT-2024-39486 · Unknown · Enpass Password Manager

Efchatz · Published 2024-09-26 · Updated 2024-09-30 · CVE-2024-9203

Positive Technologies (AI Summary)

CVSS v2.0

1.0

Low

Base vector

AV:L/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Enpass Password Manager versions up to 6.9.5

Description A vulnerability has been found in Enpass Password Manager, which affects some unknown processing and leads to cleartext storage of sensitive information in memory. The manipulation requires a local attack, and the complexity of the attack is rather high. The exploitation is known to be difficult.

Recommendations For Enpass Password Manager versions up to 6.9.5, upgrade to version 6.10.1 to address this issue. It is recommended to upgrade the affected component.

Fix

Weakness Enumeration

CWE-316

Related Identifiers

CVE-2024-9203

Affected Products

Enpass Password Manager

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-9203 · Security Note
• https://enpass.io/release-notes/windows-10-desktop · Patch
• https://t.me/cvedetector/6431 · Telegram Post
• https://twitter.com/CVEnew/status/1839358150123934148 · Twitter Post
• https://vuldb.com/?submit.411207 · Note
• https://vuldb.com/?id.278561 · Note
• https://t.me/cvenotify/96192 · Telegram Post
• https://vuldb.com/?ctiid.278561 · Note
• https://twitter.com/VulmonFeeds/status/1839394215043781021 · Twitter Post