CVE-2019-12171

Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful…

published July 8, 2019

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Published
2019-07-08T12:44Z
EPSS history
Timeline
  • 08 JUL 12:44Z
    Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful…
    cvelistv5