CVE-2024-39846
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive informa...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com