CVE-2022-0725

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-07265.4Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07275.4Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07284.8The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege userCVE-2022-07298.8Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.CVE-2022-07309.8Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-07316.5Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.CVE-2022-07327.5The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, CVE-2022-07346.1A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FCVE-2022-07359.8An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 beforCVE-2022-07367.5Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.CVE-2022-07374.8The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to performCVE-2022-07387.5An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.
CVE-2022-0725: High severity, CVSS 7.5 | Vulnix