Unrated

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the...

CVE-2020-12755 First seen on SecPulse May 10, 2020

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-12755 kio-extras Fixed in: 4:20.08.3-1

Original description The description as published by the source.

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch commits.kde.org

Key facts

Severity: Unrated
Published: May 10, 2020
First seen on SecPulse: May 10, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51