CVE-2023-32784
High
Description
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.
SeverityHigh
CVSS7.5
Exploit probability—
ProductKeepass
PublishedMay 15, 2023
First seenMay 15, 2023
Weakness typeCWE-319CWE-319
How to fix
Update
- keepass keepass2.54 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| keepass keepass | 2.00 ≤ v < 2.54 | 2.54 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.