CVE-2023-23349 - Vulnerability Details - OpenCVE

Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00013.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2023-27449	Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials.

Fixes

Solution

Install Kaspersky Password Manager (KPM) version 24.0.0.427 or later using the following url: https://support.kaspersky.com/help/KPM/Win24.0/en-US/85241.htm

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324

History

Thu, 10 Apr 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Kaspersky

Published: 2024-03-22T16:15:55.200Z

Updated: 2025-04-10T20:10:58.369Z

Reserved: 2023-01-11T20:11:14.512Z

Link: CVE-2023-23349

Vulnrichment

Updated: 2024-08-02T10:28:40.854Z

NVD

Status : Awaiting Analysis

Published: 2024-03-22T17:15:07.537

Modified: 2024-11-21T07:46:01.480

Link: CVE-2023-23349

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-23349", "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "state": "PUBLISHED", "assignerShortName": "Kaspersky", "dateReserved": "2023-01-11T20:11:14.512Z", "datePublished": "2024-03-22T16:15:55.200Z", "dateUpdated": "2025-04-10T20:10:58.369Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "shortName": "Kaspersky", "dateUpdated": "2024-03-27T11:51:13.706Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-316", "description": "CWE-316: Cleartext Storage of Sensitive Information in Memory", "type": "CWE"}]}], "affected": [{"vendor": "Kaspersky", "product": "Kaspersky Password Manager for Windows", "versions": [{"version": "*", "status": "affected", "lessThan": "24.0.0.427", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "Install Kaspersky Password Manager (KPM) version 24.0.0.427 or later using the following url: https://support.kaspersky.com/help/KPM/Win24.0/en-US/85241.htm"}], "timeline": [{"time": "2024-03-18T00:00:00.000Z", "lang": "en", "value": "Advisory published by Kaspersky"}], "credits": [{"lang": "en", "value": "Efstratios Chatzoglou", "type": "finder"}, {"lang": "en", "value": "Zisis Tsiatsikas", "type": "finder"}, {"lang": "en", "value": "Vyron Kampourakis", "type": "finder"}], "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324", "name": "Advisory issued on March 18, 2024", "tags": ["vendor-advisory"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-25T16:49:20.375552Z", "id": "CVE-2023-23349", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-10T20:10:58.369Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:28:40.854Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324", "name": "Advisory issued on March 18, 2024", "tags": ["vendor-advisory", "x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324", "name": "Advisory issued on March 18, 2024", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:28:40.854Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-23349", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-25T16:49:20.375552Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:19.423Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Efstratios Chatzoglou"}, {"lang": "en", "type": "finder", "value": "Zisis Tsiatsikas"}, {"lang": "en", "type": "finder", "value": "Vyron Kampourakis"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.2, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kaspersky", "product": "Kaspersky Password Manager for Windows", "versions": [{"status": "affected", "version": "*", "lessThan": "24.0.0.427", "versionType": "custom"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2024-03-18T00:00:00.000Z", "value": "Advisory published by Kaspersky"}], "solutions": [{"lang": "en", "value": "Install Kaspersky Password Manager (KPM) version 24.0.0.427 or later using the following url: https://support.kaspersky.com/help/KPM/Win24.0/en-US/85241.htm"}], "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#180324", "name": "Advisory issued on March 18, 2024", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form of a website with the saved credentials, and the KPM extension must autofill these credentials. The attacker must then launch a malware module to steal those specific credentials."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-316", "description": "CWE-316: Cleartext Storage of Sensitive Information in Memory"}]}], "providerMetadata": {"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "shortName": "Kaspersky", "dateUpdated": "2024-03-27T11:51:13.706Z"}}}, "cveMetadata": {"cveId": "CVE-2023-23349", "state": "PUBLISHED", "dateUpdated": "2025-04-10T20:10:58.369Z", "dateReserved": "2023-01-11T20:11:14.512Z", "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "datePublished": "2024-03-22T16:15:55.200Z", "assignerShortName": "Kaspersky"}, "dataVersion": "5.1"}