HNGlance

Top Best New Show

KeePass flaw allows retrieval of master password, PoC is public

https://www.helpnetsecurity.com/2023/05/17/cve-2023-32784/

by pil0u • 3 years ago

9 2 3 years ago

HE

helpnetsecurity.com

Related Stories

Loading related stories...

Comments

2

theamk• 3 years ago

Note, this is allows one to "retrieve the master password from the software’s memory", not from disk.

Which means the importance is pretty low.. if you have a malicious program running in your account it is game over anyway, as it can sniff the keyboard or inject code into process or do many other things to steal your password.

Researcher says the big problem is "someone could obtain access to your computer and conduct forensic analysis". I agree with that, and I also thing this is not a big concert for many people.

DemiGuru• 3 years ago

Also note that KeepassXC is unaffected - https://github.com/keepassxreboot/keepassxc/discussions/9433

Source preview

helpnetsecurity.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms