CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in ~/.kedpm/history that is written in cleartext

published April 27, 2017

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

kedpm 0.5 and 1.0 creates a history file in ~/.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password entries created and consulted are also accessible in cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01383 · 71.8th percentile
Published
2017-04-27T15:00Z
EPSS history
Timeline
  • 27 APR 15:00Z
    kedpm 0.5 and 1.0 creates a history file in ~/.kedpm/history that is written in cleartext
    cvelistv5