CVE-2022-0725

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-532

Affected software

Vendor	Product	Versions
n/a	keepass	no fix available

References

https://bugzilla.redhat.com/show_bug.cgi?id=2052696Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2052696Issue Tracking, Third Party Advisory

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-07265.4Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07275.4Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07284.8The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege user CVE-2022-07298.8Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.CVE-2022-07309.8Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-07316.5Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.CVE-2022-07327.5The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, CVE-2022-07346.1A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG F CVE-2022-07359.8An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 befor CVE-2022-07367.5Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.CVE-2022-07374.8The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform CVE-2022-07387.5An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.