Vulnerability Details : CVE-2020-12755
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.
Products affected by CVE-2020-12755
- cpe:2.3:a:kde:kio-extras:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-12755
0.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 26 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-12755
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST | |
|
3.3
|
LOW | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
1.8
|
1.4
|
NIST |
References for CVE-2020-12755
-
https://commits.kde.org/kio-extras/d813cef3cecdec9af1532a40d677a203ff979145
kio-extras.git - Additional components to increase the functionality of KIOMailing List;Patch;Vendor Advisory
Jump to