CVE pending
Vulnerable software
PasswordSafe 8.12.1.22757 (according to the manufacturer, the current version 8.13.9.26689 was also affected at that time)
Vulnerability
Weak cryptography
Timeline
- 26.01.2022: Contact with Mateso by e-mail
- 26.01.2022: Answer from Mateso
- 02.02.2022: Consultation from Mateso
- 03.03.2022: Phone call with Mateso – update planned until end of August 2022
- 04.03.2022: Since then no response to inquiries from HanseSecure.
- 17.10.2022: Unsuccessful contact attempt
- 10.02.2023: Manufacturer contacted again
- 11.02.2023: Answer from manufacturer with request for further extension.
- 14.02.2023: Reply from HanseSecure for proposed solution: no response
- 28.02.2023: Publication