Vulnerability CVE-2001-0984


Published: 2001-09-13   Modified: 2012-02-12

Description:
Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.

Type:

CWE-Other

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Counterpane -> Password safe 

 References:
http://www.securityfocus.com/archive/1/213931
http://www.securityfocus.com/bid/3337
https://exchange.xforce.ibmcloud.com/vulnerabilities/7123

Copyright 2024, cxsecurity.com

 

Back to Top