High
keepass2 — security advisory
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
- Products
- keepass2
- Affected versions
- 2.29+dfsg-1, 2.30+dfsg-1, 2.30+dfsg-2, 2.31+dfsg-1, 2.32+dfsg-1, 2.36+dfsg-1, 2.37+dfsg-1, 2.38+dfsg-1, 2.41+dfsg-1, 2.43+dfsg-1, 2.44+dfsg-1, 2.47+dfsg-2, 2.57+dfsg-3, 2.57+dfsg-4, 2.60+dfsg-1
- Fixed versions
- Not specified
- CVEs
- CVE-2022-0725
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:38 UTC · Revision 1
Source evidence
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
osv:UBUNTU-CVE-2022-0725
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
keepass2
Fixed versions: Not specified
Complete source record
{
"id": "88aad830a5aac15b01ec2bff02a29aa4f1ded792020be0f432a5d3406f4bc068",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-0725",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-0725",
"summary": "A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.",
"evidence": "osv:UBUNTU-CVE-2022-0725",
"products": [
{
"name": {
"value": "keepass2",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.29+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.30+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.30+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "2.31+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.32+dfsg-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.36+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "2.37+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "2.38+dfsg-1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.41+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.43+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.44+dfsg-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.47+dfsg-2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.47+dfsg-2",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.57+dfsg-3",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.60+dfsg-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "keepass2",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.57+dfsg-3",
"evidence": "/affected/7/versions"
},
{
"value": "2.57+dfsg-4",
"evidence": "/affected/7/versions"
},
{
"value": "2.60+dfsg-1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2022-0725",
"aliases": [
"UBUNTU-CVE-2022-0725"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"2.29+dfsg-1",
"2.30+dfsg-1",
"2.30+dfsg-2",
"2.31+dfsg-1",
"2.32+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.32+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"2.36+dfsg-1",
"2.37+dfsg-1",
"2.38+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.38+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"2.41+dfsg-1",
"2.43+dfsg-1",
"2.44+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.44+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.47+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.47+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.47+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.47+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.57+dfsg-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.57+dfsg-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.60+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.60+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "keepass2",
"purl": "pkg:deb/ubuntu/keepass2?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.57+dfsg-3",
"2.57+dfsg-4",
"2.60+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-0725.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keepass2",
"binary_version": "2.60+dfsg-1"
}
]
}
}
],
"modified": "2026-10-17T12:57:14.586048882Z",
"provider": "osv",
"upstream": [
"CVE-2022-0725"
],
"references": [
"https://ubuntu.com/security/CVE-2022-0725",
"https://bugzilla.redhat.com/show_bug.cgi?id=2052696",
"https://sourceforge.net/p/keepass/discussion/329220/thread/da7546b7e1/",
"https://sourceforge.net/p/keepass/discussion/329220/thread/33d6afdc/",
"https://www.cve.org/CVERecord?id=CVE-2022-0725"
]
},
"related_cves": [
{
"value": "CVE-2022-0725",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 357002,
"published_at": "2022-03-10T17:44:00+00:00"
}