Unscored severity · published Nov 30, 2012
CVE-2012-4571
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyring · Python
0.9.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4571
pypi.python.org
http://pypi.python.org/pypi/keyring
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/10/31/8
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1634-1
bugs.launchpad.net
https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1004845
More from Keyring
7.5
CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions
6.2
CVE-2012-5578
Python keyring has insecure permissions on new databases allowing world-readable files to be created