CVE-2023-38840

5.5

MEDIUMCVSS v3

Published

August 15, 2023

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.

bitwarden/desktop

GitHubThe desktop vault (Windows, macOS, & Linux).

NVD

bitwarden/bitwarden

GitHubBitwarden client applications (web, browser extension, desktop, and cli)

<= 2023.7.0NVD

bitwarden/clients

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Bitwarden client apps (web, browser extension, desktop, and cli).

NVD

markuta/bw-dump

GitHubA proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.

NVD

bitwarden

Python Package IndexCross Platform Bitwarden library and CLI with sudolikeaboss.

<= 2023.7.0NVD

bitwarden

Crates.ioBitwarden Secrets Manager SDK

<= 2023.7.0NVD

Bitwarden

ChocolateyBitwarden, Inc. is the parent company of 8bit Solutions LLC. NAMED BEST PASSWORD MANAGER BY THE VERGE, U.S. NEWS & WORLD REPORT, CNET, AND MORE. Manage, store, secure, and share unlimited passwords across unlimited devices from anywhere. Bitwarden delivers open source password management solutions to everyone, whether at home, at work, or on the go. Generate strong, unique, and random passwords based on security requirements for every website you frequent. Bitwarden Send quickly transmits encrypted information --- files and plaintext -- directly to anyone. Bitwarden offers Teams and Enterprise plans for companies so you can securely share passwords with colleagues. Why Choose Bitwarden: World-Class Encryption Passwords are protected with advanced end-to-end encryption (AES-256 bit, salted hashing, and PBKDF2 SHA-256) so your data stays secure and private. Built-in Password Generator Generate strong, unique, and random passwords based on security requirements for every website you frequent. Global Translations Bitwarden translations exist in 40 languages and are growing, thanks to our global community. Cross-Platform Applications Secure and share sensitive data within your Bitwarden Vault from any browser, mobile device, or desktop OS, and more.

<= 2023.7.0NVD

Security Advisories

CVE-2023-38840

Description

More on this CVE