CVE-2017-18021
9.8CRITICALIt was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Publicado: 1/5/2018Actualizado: 11/21/2024
Descripción
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Análisis IAImpulsado por IA
Productos Afectados
qtpassqtpass
Referencias
- https://github.com/IJHack/QtPass/issues/338ExploitThird Party Advisory
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1Release NotesThird Party Advisory
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.htmlPatchThird Party Advisory
- https://qtpass.org/Vendor Advisory
- https://github.com/IJHack/QtPass/issues/338ExploitThird Party Advisory
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1Release NotesThird Party Advisory
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.htmlPatchThird Party Advisory
- https://qtpass.org/Vendor Advisory