CVE-2017-18021 | BDVDB-2026-94846 Detail

Description#

It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/IJHack/QtPass/releases/tag/v1.2.1
https://qtpass.org/
https://github.com/IJHack/QtPass/issues/338
https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html

Exploit#

No public exploit known

History#

Version 12018-01-05Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.