Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kwallet 本地信息泄露漏洞
Vulnerability Description
kwallet是一套安全桌面级密码存储框架。 kwallet KDE Applications 14.12.0之前版本的kwalletd中存在安全漏洞,该漏洞源于程序在对密码加密存储时,使用带有ECB模式的Blowfish。攻击者可通过实施codebook攻击利用该漏洞猜出密码。
CVSS Information
N/A
Vulnerability Type
N/A