Python Keyring vulnerabilities
3 known vulnerabilities affecting python/keyring.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2012-5577P3HIGHCVSS 7.5fixed in 0.102019-10-28
CVE-2012-5577 [HIGH] CWE-276 CVE-2012-5577: Python keyring lib before 0.10 created keyring files with world-readable permissions.
Python keyring lib before 0.10 created keyring files with world-readable permissions.
ghsanvdosv
CVE-2012-5578P4MEDIUMCVSS 6.2≤ 0.102019-11-25
CVE-2012-5578 [MEDIUM] CWE-276 CVE-2012-5578: Python keyring has insecure permissions on new databases allowing world-readable files to be created
Python keyring has insecure permissions on new databases allowing world-readable files to be created
ghsanvdosv
CVE-2012-4571P4LOWCVSS 2.1v0.9.12012-11-30
CVE-2012-4571 [LOW] CWE-310 CVE-2012-4571: Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFi
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
ghsanvdosv