CVE-2022-0725

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2022-03-10

Last modified

2024-08-02

Weaknesses

CWE-200, CWE-532

Affected products

• Extra Packages For Enterprise Linux (Fedoraproject)
• Fedora (Fedoraproject)
• Keepass (Keepass)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2052696