fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.
References
Link | Resource |
---|---|
https://commits.kde.org/kio-extras/d813cef3cecdec9af1532a40d677a203ff979145 | Mailing List Patch Vendor Advisory |
Configurations
Information
Published : 2020-05-09 09:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-12755
Mitre link : CVE-2020-12755
JSON object : View
CWE
Products Affected
kde
- kio-extras