CVEvulnerability
CVE-2018-12356
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-347
Description
An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG with an incomplete regular expression, which allows remote attackers to spoof file signatures on configuration files and extension scripts. Modifying the configuration file allows the attacker to inject additional encryption keys under their control, thereby disclosing passwords to the attacker. Modifying the extension scripts allows the attacker arbitrary code execution.
Affected configurations
• simple password store project simple password store (>= 1.7.0 < 1.7.2)
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- http://openwall.com/lists/oss-security/2018/06/14/3 Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Apr/38 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/04/30/4 Mailing List, Third Party Advisory
- https://git.zx2c4.com/password-store/commit/?id=8683403b77f59c56fcb1f05c61ab33b9fd61a30d Patch, Third Party Advisory
- https://github.com/RUB-NDS/Johnny-You-Are-Fired github.com
- https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf github.com
- https://lists.zx2c4.com/pipermail/password-store/2018-June/003308.html Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2018/06/14/3 Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Apr/38 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/04/30/4 Mailing List, Third Party Advisory
- https://git.zx2c4.com/password-store/commit/?id=8683403b77f59c56fcb1f05c61ab33b9fd61a30d Patch, Third Party Advisory
- https://github.com/RUB-NDS/Johnny-You-Are-Fired github.com
- https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf github.com
- https://lists.zx2c4.com/pipermail/password-store/2018-June/003308.html Mailing List, Third Party Advisory