CVE-2001-0984

Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/213931	Vendor Advisory
http://www.securityfocus.com/bid/3337	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7123
http://www.securityfocus.com/archive/1/213931	Vendor Advisory
http://www.securityfocus.com/bid/3337	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7123

Configurations

Configuration 1 (hide)

cpe:2.3:a:counterpane:password_safe:1.7.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:36

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/archive/1/213931 - Vendor Advisory~~	() http://www.securityfocus.com/archive/1/213931 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/3337 - Vendor Advisory~~	() http://www.securityfocus.com/bid/3337 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/7123 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/7123 -

Information

Published : 2001-09-13 04:00

Updated : 2024-11-20 23:36

NVD link : CVE-2001-0984

Mitre link : CVE-2001-0984

CVE.ORG link : CVE-2001-0984

JSON object : View

Products Affected

counterpane

password_safe

CWE

NVD-CWE-Other

{"id": "CVE-2001-0984", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2001-09-13T04:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/213931", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3337", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7123", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/213931", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/3337", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7123", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the \"Clear the password when minimized\" and \"Lock password database on minimize and prompt on restore\" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords."}], "lastModified": "2024-11-20T23:36:35.873", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:counterpane:password_safe:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A817C45-885B-41DA-A0B7-C37A64F756B9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

4.6 /10