How severe is CVE-2023-23349?

This vulnerability has a severity rating of LOW with a CVSS score of 2.2 out of 10.

What type of vulnerability is CVE-2023-23349?

This is classified as CWE-316, which is a common weakness in software security.

CVE-2023-23349 - LOW Severity | CVSS 2.2

Vulnerability Description

Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.

Related Vulnerabilities

CVE-2023-44153

LOW

CVSS:2.2(Low)

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

CWE-3162023

CVE-2024-9203

LOW

CVSS:2.5(Low)

A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows. This issue affects some unknown processing. The manipulation leads to cleartext ...

CWE-3162024

CVE-2025-48930

LOW

CVSS:2.8(Low)

The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues, as exploited in the wil...

CWE-3162025

CVE-2024-36792

HIGH

CVSS:8.2(High)

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.

CWE-3162024

CVE-2023-3762

HIGH

CVSS:7.5(High)

A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive information in memory. I...

CWE-3162023

CVE-2024-39732

HIGH

CVSS:7.5(High)

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791.

CWE-3162024