CVE-2023-41646

Summary

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://buttercup.pw/
• https://github.com/tristao-marinho/CVE-2023-41646/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://buttercup.pw/
• https://github.com/tristao-marinho/CVE-2023-41646/

• ←Previous
• Next→