CVE-2023-27706: High severity bitwarden vulnerability
Published Jun 9, 2023
·Updated
Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes.
Affected Software
2 affected components
Bitwarden Bitwarden<2023.4.0
Bitwarden Bitwarden>=1.20.0
Event History
Jun 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-27706?
CVE-2023-27706 is a vulnerability in Bitwarden Windows desktop application versions prior to v2023.4.0 that stores biometric keys in Windows Credential Manager, accessible to other local unprivileged processes.
2
What software versions are affected by CVE-2023-27706?
Bitwarden Windows desktop application versions prior to v2023.4.0 are affected by CVE-2023-27706.
3
How severe is CVE-2023-27706?
CVE-2023-27706 has a severity rating of 7.1 (high).
4
How can I fix CVE-2023-27706?
To fix CVE-2023-27706, you should update your Bitwarden Windows desktop application to version v2023.4.0 or later.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-27706?
The Common Weakness Enumeration (CWE) ID for CVE-2023-27706 is 312.