Vulnerabilities > CVE-2017-18021 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Qtpass

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
qtpass
CWE-338

Summary

It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.

Vulnerable Configurations

Part Description Count
Application
Qtpass
1