Man-in-the-Middle Vulnerability in KeePass by KeePass Solutions
CVE-2016-5119

7.5HIGH

Key Information:

Vendor: Keepass
Status: Keepass
Vendor: CVE Published:; 23 January 2017

What is CVE-2016-5119?

The automatic update feature in KeePass versions 2.33 and earlier is susceptible to man-in-the-middle attacks. This vulnerability allows an attacker to execute arbitrary code on the user's system by spoofing the version check response and providing a maliciously crafted update. Users are urged to disable automatic updates or upgrade to a patched version to mitigate the risk of exploitation.