CVE-2022-0725 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Keepass	Keepass	2.48
Fedoraproject	Extra Packages For Enterprise Linux	7.0
Fedoraproject	Fedora	35

Related Weaknesses (CWE)

CWE-532 CWE-200

References

https://bugzilla.redhat.com/show_bug.cgi?id=2052696Issue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2052696Issue TrackingThird Party Advisory

FAQ

What is CVE-2022-0725?

CVE-2022-0725 is a vulnerability with a CVSS score of 7.5 (HIGH). A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact...

How severe is CVE-2022-0725?

CVE-2022-0725 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-0725?

Check the references section above for vendor advisories and patch information. Affected products include: Keepass Keepass, Fedoraproject Extra Packages For Enterprise Linux, Fedoraproject Fedora.