CVEvulnerability

CVE-2001-0984

4.6 MEDIUM Published 2001-09-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-09-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.

Affected configurations

• counterpane password safe 1.7.1

Related

Referenced by CWE · observed example (1)

  • CWE-316 Cleartext Storage of Sensitive Information in Memory weakness

References