Weak Password Limitations in Revelation Password Manager by Genii Software
CVE-2012-2742

Currently unrated

Key Information:

Vendor: Mikel Olasagasti
Status: Revelation
Vendor: CVE Published:; 27 June 2012

🔔 Create Mikel Olasagasti Vulnerability Alert

What is CVE-2012-2742?

Revelation Password Manager versions 0.4.13-2 and earlier are susceptible to a significant vulnerability where the effective password length is restricted to just 32 characters. This limitation, combined with a padding of zeros, drastically reduces the entropy of stored passwords, making it easier for attackers to utilize brute-force methods to crack them. The vulnerability exposes users' sensitive encryption keys, allowing context-dependent attackers to gain unauthorized access. The lack of iteration through a strong hashing algorithm, such as SHA, further exacerbates the security issues associated with the password management functionality.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/76407

vdb-entryx_refsource_XF

http://www.openwall.com/lists/oss-security/2012/06/18/1

mailing-listx_refsource_MLIST

http://www.securityfocus.com/bid/54060

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 27, 2012
Vulnerability Reserved
May 14, 2012

CVE-2012-2742 Data

JSON