Local Information Disclosure Vulnerability in Revelation Password Manager
CVE-2012-3818

Currently unrated

Key Information:

Vendor

Mikel Olasagasti

Status
Revelation
Vendor
CVE Published:
29 June 2012

What is CVE-2012-3818?

The fpm exporter in Revelation versions 0.4.13-2 and earlier encrypts the version number but neglects to encrypt the password during file export. This oversight could potentially allow local users to access sensitive information that should remain protected, highlighting a significant security gap in the way that confidential data is managed by the application.

References

http://als.regnet.cz/fpm2/feedback/2
x_refsource_MISC
http://knoxin.blogspot.co.uk/2012/06/revelation-password-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.