
image credit: adobe stock
Popular password manager KeePass has a worrying exploit that could possibly result in your master password being stolen.
A security researcher has published a proof-of-concept that demonstrates how a threat actor could extract a user’s master password from the KeePass app’s memory by exploiting a bug, tracked as CVE-2023-3278 .
“KeePass Master Password Dumper is a simple proof-of-concept tool used to dump the master password from KeePass’s memory. Apart from the first password character, it is mostly able to recover the password in plaintext,” claims the researcher.