CVE-2024-9203

LOW Year: 2024
CVSS v3 Score
2.5
Low
CVSS v2 Score
1.0
Low
Weakness Type
CWE-316
View all →

Vulnerability Description

A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows. This issue affects some unknown processing. The manipulation leads to cleartext storage of sensitive information in memory. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 6.10.1 is able to address this issue. It is recommended to upgrade the affected component.

Related Vulnerabilities

CVE-2023-23349

LOW
CVSS:2.2(Low)

Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Goog...

CWE-3162023

CVE-2023-44153

LOW
CVSS:2.2(Low)

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

CWE-3162023

CVE-2025-48930

LOW
CVSS:2.8(Low)

The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues, as exploited in the wil...

CWE-3162025

CVE-2019-3733

MEDIUM
CVSS:4.4(Medium)

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulner...

CWE-3162019

CVE-2021-23182

MEDIUM
CVSS:4.4(Medium)

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. This issue affects: Gall...

CWE-3162021

CVE-2021-23211

MEDIUM
CVSS:4.4(Medium)

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory dumps. This issue affec...

CWE-3162021