CVE-2023-38840
MEDIUM 5.5EPSS 0.5%
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 0.52% chance of exploitation in the next 30 days, 43rd percentile
- Published
- 2023-08-15
- Updated
- 2024-10-08
Proof-of-concept exploits (1)
- markuta/bw-dump42★ · 2024-03-01
Security advisories
- bitwarden/clients/pull/5813
- bitwarden/desktop/issues/476
- https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords