6.2
CVSS
Python keyring has insecure permissions on new databases allowing world-readable files to be created
Severity: MEDIUM
📦
keyring
Vendor: python
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
0
Remote Access
Total CVEs
5
Total Indexed
Avg. EPSS
0.76%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
7.5
CVSS
Python keyring lib before 0.10 created keyring files with world-readable permissions.
Severity: HIGH
2.1
CVSS
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
Severity: LOW