Vulnerabilities > CVE-2017-18021 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Qtpass

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
qtpass
CWE-338
critical
NVD
Published: 2018-01-05
Updated: 2024-11-21

Summary

It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.

Vulnerable Configurations

Part Description Count
Application
Qtpass
1

Common Weakness Enumeration (CWE)

References