CVE-2022-0725
HIGH 7.5EPSS 2.5%
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
- CVSS v3.1
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 2.45% chance of exploitation in the next 30 days, 83th percentile
- Published
- 2022-03-07
- Updated
- 2024-08-02
Proof-of-concept exploits (1)
- ByteHackr/keepass_poc4★ · 2022-03-12