CVE-2013-2120 Weak cryptography in KDE Paste Applet
Weak password generation in KDE Paste Applet allows attackers to bypass authentication via brute-force attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-2120?
CVE-2013-2120 is a high-severity vulnerability in KDE Paste Applet, published on 11 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
Weakness: CWE-287
Which versions are affected by CVE-2013-2120?
It affects 1 product.
Products include Kde Paste Applet.
How do I fix CVE-2013-2120?
Upgrade to a fixed version.
Is CVE-2013-2120 being exploited?
There is no known exploitation of CVE-2013-2120 in the wild and no public exploit code.
Other vulnerabilities in KDE Paste Applet
Sources
Also known as DEBIAN-CVE-2013-2120, GHSA-v537-cf87-935c.