CVE-2020-12755

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the…

published May 9, 2020

CVSS
—
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Published
2020-05-09T15:52Z
EPSS history
Timeline
  • 09 MAY 15:52Z
    fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the…
    cvelistv5