Main
Vulnerability Database
Exploits
ID:9787 - Exploit for Storing passwords in a recoverable format in KeePass - CVE-2023-32784
ID:9787 - Exploit for Storing passwords in a recoverable format in KeePass - CVE-2023-32784
Published: May 13, 2024
Vulnerability identifier: #VU76358
Vulnerability risk: Low
CVE-ID: CVE-2023-32784
CWE-ID: CWE-257
Exploitation vector: Local access
Vulnerable software:
KeePass
KeePass
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to recover the master password.
The vulnerability exists due to the way KeePass stores data in memory. A local user or a malicious application can extract master password from a process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system.
Remediation
Install update from vendor's website.