CVE-2013-7252

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.15%

Published

Jan 18, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.

Weaknesses (CWE)

CWE-310

Affected Products (1)

kde · kde_applicationsvulnerable

References (14)

http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/

Exploit

http://www.openwall.com/lists/oss-security/2014/01/02/3

http://www.openwall.com/lists/oss-security/2015/01/09/7

http://www.securityfocus.com/bid/67716

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1048168

Issue Tracking

https://security.gentoo.org/glsa/201606-19

Third Party Advisory

https://www.kde.org/info/security/advisory-20150109-1.txt

PatchVendor Advisory

http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/

Exploit

http://www.openwall.com/lists/oss-security/2014/01/02/3

http://www.openwall.com/lists/oss-security/2015/01/09/7

http://www.securityfocus.com/bid/67716

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1048168

Issue Tracking

https://security.gentoo.org/glsa/201606-19

Third Party Advisory

https://www.kde.org/info/security/advisory-20150109-1.txt

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs