{"id":"CVE-2022-0725","aliases":["EUVD-2022-15794","GHSA-4p6x-85ff-qrhc","UBUNTU-CVE-2022-0725"],"status":"published","title":"A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in...","description":"A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02821,"percentile":0.86693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200","CWE-532"],"published":"2022-03-07T14:00:21Z","modified":"2026-10-17T12:57:14Z","exploits":[{"source":"pocgithub","id":"ByteHackr/keepass_poc","title":"ByteHackr/keepass_poc","date":"2022-02-28","url":"https://github.com/ByteHackr/keepass_poc"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.29+dfsg-1","2.30+dfsg-1","2.30+dfsg-2","2.31+dfsg-1","2.32+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.36+dfsg-1","2.37+dfsg-1","2.38+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41+dfsg-1","2.43+dfsg-1","2.44+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.47+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.47+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.57+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.60+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"keepass2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.57+dfsg-3","2.57+dfsg-4","2.60+dfsg-1"]}],"products":[{"vendor":"fedoraproject","product":"extra_packages_for_enterprise_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"keepass","product":"keepass"},{"vendor":"open source","product":"keepass"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052696","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0725"},{"url":"https://github.com/ByteHackr/keepass_poc"},{"url":"https://github.com/advisories/GHSA-4p6x-85ff-qrhc"},{"url":"https://ubuntu.com/security/CVE-2022-0725","tags":["report"]},{"url":"https://sourceforge.net/p/keepass/discussion/329220/thread/da7546b7e1/","tags":["report"]},{"url":"https://sourceforge.net/p/keepass/discussion/329220/thread/33d6afdc/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0725","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-0725","description":"A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","status":"published","published":"2022-03-07T14:00:21Z","modified":"2024-08-02T23:40:03.535Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-15794","description":"A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","status":"published","published":"2022-03-07T14:00:21Z","modified":"2024-08-02T23:40:03Z","updated_at":"2026-11-03T03:26:03.912978Z"}],"ghsa":[{"id":"GHSA-4p6x-85ff-qrhc","title":"A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in...","description":"A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in the system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","status":"published","published":"2022-03-11T00:02:24Z","modified":"2023-01-31T05:03:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:48:25.922736Z"}],"nvd":[{"id":"CVE-2022-0725","description":"A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","status":"published","published":"2022-03-10T17:44:56.73Z","modified":"2026-06-17T04:21:08.09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-532"],"updated_at":"2026-11-02T14:07:13.7085Z"}],"osv":[{"id":"UBUNTU-CVE-2022-0725","description":"A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.","status":"published","published":"2022-03-10T17:44:00Z","modified":"2026-10-17T12:57:14.586048882Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"}]}}