Require master password for exports - store in database
A lightweight and easy-to-use password manager
Brought to you by:
dreichl
Menu
▾
▴
#2784 Require master password for exports - store in database
In response to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24055, some people have said that the issue can be mitigated by configuring KeePass to require the master password for exports. That doesn't help a single bit if the attacker can already edit the configuration file.
It would be nice if this flag would be stored in the database itself. That shouldn't be editable by attackers, and the setting will even remain if the database is copied to a different machine.
This idea has been discussed before and it is already mentioned on
https://keepass.info/help/base/security.html#secspecattacks
For information about the configuration security, see
https://keepass.info/help/kb/sec_issues.html#cfgw
https://keepass.info/help/kb/config_enf.html
Best regards,
Dominik
More discussion here.
https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/
cheers, Paul