KeePass vulnerabilities
We track 2 vulnerabilities in KeePass products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2023.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest KeePass vulnerabilities
- 7.5 High severity
Keepass: Cleartext Transmission of Sensitive Information
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sy
- 7.5 High severity
keepass: Insertion of Sensitive Information into Log File
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.