Description
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
References (4)
Scores
CVSS v3
9.8
EPSS
0.0058
EPSS Percentile
68.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-338
Status
published
Products (1)
qtpass/qtpass
< 1.2.1
Published
Jan 05, 2018
Tracked Since
Feb 18, 2026