The main issue that Belgium's Federal Cyber Emergency Team saw was that KeePass did not prompt the user for the master password before allowing the export of passwords to commence.
Using a specific trigger, an attacker could export the entire password database to another file. Reported by the Federal Cyber Emergency Team of Belgium, it revolved around the application's trigger mechanism. Last week, word about a vulnerability in the password manager spread online.
0 kommentar(er)
