Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12171
4.3
MEDIUMCVSS v2
Published
July 8, 2019
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
Dropbox
ChocolateyDropbox is a free service that lets you bring all your photos, docs, and videos anywhere. This means that any file you save to your Dropbox will automatically save to all your computers, phones and even the Dropbox website. Dropbox also makes it super easy to share with others, whether you're a student or professional, parent or grandparent. Even if you accidentally spill a latte on your laptop, have no fear! You can relax knowing that Dropbox always has you covered, and none of your stuff will ever be lost.
## Features
- Best-in-class sync technology
- Easy and secure sharing
- Anytime, anywhere access
- 256-bit AES and SSL/TLS encryption
- Version history and file recovery
- Advanced sharing permissions
- Password-protected and expiring shared links
- Remote device wipe
- Require two-factor authentication (2FA)
- Granular permissions
- Account transfer tool
- Enables HIPAA compliance
- Dropbox Paper
- MS Office 365 integration
- Dropbox badge
- Commenting
- Plus button
- File requests
- Smart Sync
- Team folder
- Admin console
- Centralized billing
- Company-managed groups
- Unlimited API access to platform partners
- API access for data transport
- Priority email support
- Live chat support
## Notes
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
ChocolateyDropbox is a free service that lets you bring all your photos, docs, and videos anywhere. This means that any file you save to your Dropbox will automatically save to all your computers, phones and even the Dropbox website. Dropbox also makes it super easy to share with others, whether you're a student or professional, parent or grandparent. Even if you accidentally spill a latte on your laptop, have no fear! You can relax knowing that Dropbox always has you covered, and none of your stuff will ever be lost.
## Features
- Best-in-class sync technology
- Easy and secure sharing
- Anytime, anywhere access
- 256-bit AES and SSL/TLS encryption
- Version history and file recovery
- Advanced sharing permissions
- Password-protected and expiring shared links
- Remote device wipe
- Require two-factor authentication (2FA)
- Granular permissions
- Account transfer tool
- Enables HIPAA compliance
- Dropbox Paper
- MS Office 365 integration
- Dropbox badge
- Commenting
- Plus button
- File requests
- Smart Sync
- Team folder
- Admin console
- Centralized billing
- Company-managed groups
- Unlimited API access to platform partners
- API access for data transport
- Priority email support
- Live chat support
## Notes
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**= 71.4.108.0NVD
NPM
GitHub