CVE-2023-27706

7.1

HIGHCVSS v3

Published

June 9, 2023

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes.

bitwarden/bitwarden

GitHubBitwarden client applications (web, browser extension, desktop, and cli)

= *, < 2023.4.0NVD

bitwarden/clients

GitHubBitwarden client apps (web, browser extension, desktop, and cli).

NVD

bitwarden

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Cross Platform Bitwarden library and CLI with sudolikeaboss.

= *, < 2023.4.0NVD

bitwarden

Crates.ioBitwarden Secrets Manager SDK

= *, < 2023.4.0NVD

Bitwarden

ChocolateyBitwarden, Inc. is the parent company of 8bit Solutions LLC. NAMED BEST PASSWORD MANAGER BY THE VERGE, U.S. NEWS & WORLD REPORT, CNET, AND MORE. Manage, store, secure, and share unlimited passwords across unlimited devices from anywhere. Bitwarden delivers open source password management solutions to everyone, whether at home, at work, or on the go. Generate strong, unique, and random passwords based on security requirements for every website you frequent. Bitwarden Send quickly transmits encrypted information --- files and plaintext -- directly to anyone. Bitwarden offers Teams and Enterprise plans for companies so you can securely share passwords with colleagues. Why Choose Bitwarden: World-Class Encryption Passwords are protected with advanced end-to-end encryption (AES-256 bit, salted hashing, and PBKDF2 SHA-256) so your data stays secure and private. Built-in Password Generator Generate strong, unique, and random passwords based on security requirements for every website you frequent. Global Translations Bitwarden translations exist in 40 languages and are growing, thanks to our global community. Cross-Platform Applications Secure and share sensitive data within your Bitwarden Vault from any browser, mobile device, or desktop OS, and more.

= *, < 2023.4.0NVD

Security Advisories

CVE-2023-27706

Description

More on this CVE