low3.5
CVE-2024-39846
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information.
Impact
NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use.
Affected products
| Product | Affected versions |
|---|---|
| NewPass | before 1.2.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.