CVE-2024-39846
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive informa...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com