CVE-2017-18021
9.8CRITICALIt was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Published: 1/5/2018Updated: 11/21/2024
Description
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
AI AnalysisPowered by AI
Affected Products
qtpassqtpass
References
- https://github.com/IJHack/QtPass/issues/338ExploitThird Party Advisory
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1Release NotesThird Party Advisory
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.htmlPatchThird Party Advisory
- https://qtpass.org/Vendor Advisory
- https://github.com/IJHack/QtPass/issues/338ExploitThird Party Advisory
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1Release NotesThird Party Advisory
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.htmlPatchThird Party Advisory
- https://qtpass.org/Vendor Advisory