14
BSI warnt vor KeePassXC-Schwachstellen / BSI warns of vulnerabilities in the password manager KeePassXC (www.heise.de)
submitted 3 years ago by to c/foss@beehaw.org
19 comments fedilink hide all child comments
 

heisec@social.heise.de - BSI warnt vor KeePassXC-Schwachstellen

Das BSI warnt vor Schwachstellen im Passwort-Manager KeePassXC. Angreifer können Dateien oder das Master-Passwort ohne Authentifzierungsrückfrage manipulieren.

[The BSI warns of vulnerabilities in the password manager KeePassXC. Attackers can manipulate files or the master password without authentication confirmation.]

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 years ago* (last edited 3 years ago) (1 child)

Can't read German. What is required to perform this attack?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 3 points 3 years ago (1 child)

    Ok I checked it up (CVE-2023-35866). It basically says an attacker may export everything if they have access to your unlocked database. Which seems... obvious? The project contributors says it's not a vulnerability which I incline to agree.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •