Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Mageia 8: MGASA-2023-0222 High: Keepass Vulnerability in Cleartext Access

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. (CVE-2023-24055) Possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running (CVE-2023-32784) . MGASA-2023-0221 - Updated keepass packages fix security vulnerability Publication date: 07 Jul 2023 URL: https://advisories.mageia.org/MGASA-2023-0221.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-24055, CVE-2023-32784 Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. (CVE-2023-24055) Possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running (CVE-2023-32784) References: - https://bugs.mageia.org/show_bug.cgi?id=31935 - - https://www.cve.org/CVERecord?id=CVE-2023-24055 - https://www.cve.org/CVERecord?id=CVE-2023-32784 SRPMS: - 8/core/keepass-2.54-1.mga8 . Recent KeePass updates in Mageia 8 tackle vulnerabilities concerning the exposure of unencrypted passwords. Discover further details.. Keepass Security Update, Configuration File Vulnerability, Mageia Advisory. . LinuxSecurity.com Team

Jul 07, 2023 Mageia