gist.github.com
https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 CVE-2024-33900
MEDIUM
Record summary
CVE-2024-33900 has a selected CVSS score of 6.5 (medium).
Description
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 6, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
keepassxcBrowse keepassxc / keepassxcDefault status: affected | CVE List | 2.7.7 | affected |
References
5github.com
https://github.com/keepassxreboot/keepassxc/issues/10784 keepassxc.org
https://keepassxc.org/blog keepassxc.org
https://keepassxc.org/blog/2019-02-21-memory-security nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-33900