VULNERABILITY INTELLIGENCE

CVE-2022-0725

CVSS score7.5 HIGH
EPSS probability2.82%
CISA KEVNot currently listed
Published2022-03-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-532: Insertion of Sensitive Information into Log File

Primary references