CVE-2015-8378

In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-04-10

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Keepassx (Keepassx Project)

References

• http://bugs.debian.org/791858
• https://www.keepassx.org/changelog