Live data from Hacker News

KeePassRPC Plugin Vulnerability: CVE-2020-16271 Warning message

forum.kee.pm

1–2 of 2 posts

Re: KeePassRPC Plugin Vulnerability: CVE-2020-16271 Warning message

#2
When KeePassRPC (version 1.13.0 or higher) detects a previously authorised client which uses the same encryption key as the one used during a successful exploit of the first related vulnerability fixed in KeePassRPC 1.12.x, we display a warning message.

In the current version of KeePassRPC, this reads:

Your KeePass instance may have previously been exploited by a malicious attacker.

The passwords contained within any databases that were open before this point may have been exposed so you should change them.