Vulnerability Details CVE-2017-18021
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 5.0
References
- https://github.com/IJHack/QtPass/issues/338
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html
- https://qtpass.org/
- https://github.com/IJHack/QtPass/issues/338
- https://github.com/IJHack/QtPass/releases/tag/v1.2.1
- https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html
- https://qtpass.org/