CVE-2024-9203CWE-316

Enpass Password Manager sensitive information in memory

Low · published September 26, 2024

CVSS v4.0
2.0
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows. This issue affects some unknown processing. The manipulation leads to cleartext storage of sensitive information in memory. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 6.10.1 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00136 · 2.8th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2024-09-26T17:00Z
EPSS history
Timeline
  • 26 SEP 17:00Z
    Enpass Password Manager sensitive information in memory
    cvelistv5