CVE-2024-33900
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor dispute...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web gist.github.com
- web keepassxc.org
- web keepassxc.org