CVE-2022-0725
published 2022-03-10CVE-2022-0725: A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.45%
82.8th percentile
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | extra_packages_for_enterprise_linux | — | — |
| fedoraproject | fedora | — | — |
| keepass | keepass | — | — |
| keepass | keepass | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4p6x-85ff-qrhc: A flaw was found in KeePass
ghsa_unreviewed·2022-03-11
CVE-2022-0725 [HIGH] CWE-532 GHSA-4p6x-85ff-qrhc: A flaw was found in KeePass
A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in the system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
OSV
CVE-2022-0725: A flaw was found in keepass
osv·2022-03-10·CVSS 7.5
CVE-2022-0725 [HIGH] CVE-2022-0725: A flaw was found in keepass
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-03-10
Published