medium5.5
CVE-2023-38840
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
Impact
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitwarden | Bitwarden | through 2023.7.0 |
References
- NVD record
- CVE.org record
- https://github.com/bitwarden/clients/pull/5813
- https://github.com/bitwarden/desktop/issues/476
- https://github.com/markuta/bw-dump
- https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/
- https://github.com/bitwarden/clients/pull/5813
- https://github.com/bitwarden/desktop/issues/476
- https://github.com/markuta/bw-dump
- https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/