CVE-2010-5196

EUVD-2010-5155
Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file.  NOTE: some of these details are obtained from third party information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
keepasspassword_safe
𝑥
≤ 2.10
keepasspassword_safe
1.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
keepass2
bookworm
2.47+dfsg-2
fixed
bullseye
2.47+dfsg-2
fixed
sid
2.57+dfsg-2
fixed
trixie
2.57+dfsg-2
fixed