CVE-2012-2742
Status: ModifiedMedium (5)—
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.82%
- Percentile among all scored CVEs: 78
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-255
References
- http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html
- http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch
- http://www.openwall.com/lists/oss-security/2012/06/18/1
- http://www.openwall.com/lists/oss-security/2012/06/18/3
- http://www.securityfocus.com/bid/54060
- https://bugs.gentoo.org/show_bug.cgi?id=421571
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76407
- http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html
- http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch
- http://www.openwall.com/lists/oss-security/2012/06/18/1
- http://www.openwall.com/lists/oss-security/2012/06/18/3
- http://www.securityfocus.com/bid/54060
- https://bugs.gentoo.org/show_bug.cgi?id=421571
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76407
Raw JSON (NVD)
Show
{
"id": "CVE-2012-2742",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-06-27T22:55:01.520",
"references": [
{
"url": "http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html",
"source": "secalert@redhat.com"
},
{
"url": "http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/06/18/1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/06/18/3",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/54060",
"source": "secalert@redhat.com"
},
{
"url": "https://bugs.gentoo.org/show_bug.cgi?id=421571",
"source": "secalert@redhat.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76407",
"source": "secalert@redhat.com"
},
{
"url": "http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/06/18/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/06/18/3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/54060",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugs.gentoo.org/show_bug.cgi?id=421571",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76407",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-255"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack."
},
{
"lang": "es",
"value": "Revelation v0.4.13-2 y anteriores solamente usa los primeros 32 caracteres de una contraseña seguido por una secuencia de ceros, lo que reduce la entropía y hace más fácil para los atacantes dependientes de contexto descifrar contraseñas y obtener acceso a las claves a través de un ataque de fuerza bruta."
}
],
"lastModified": "2026-06-16T23:42:01.143",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "314159CF-0626-44BC-9D5D-EE1077C3AED6",
"versionEndIncluding": "0.4.13-2"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5BBB719-4CA3-46CB-BF18-1B6D83C640C7"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "728EBEA8-8D8B-4FC2-9DCD-B6543DC04FA4"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6763F981-8A35-4A2E-A699-06227B8FC628"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEAF6C4D-54F0-4224-A84B-F11A8DFE6AE0"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB3C5098-149B-4CC4-8091-2CEC591F95D5"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD152ECE-AB36-4602-995C-AEDE9A42D6F9"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93378459-2D11-4570-A15B-E4E9B1E0B34D"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8A2E5A2-15A3-442A-97A8-778745898D58"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCF2830E-DF74-4FC9-82B5-711EE75637A8"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1363B73-25C3-4B3C-BCBF-DB848D740345"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50DAC843-9A69-4BF0-B491-28CFFF6528B2"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC044A19-8A72-4953-8AFB-658334D7748A"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A20FD9A-5E5B-4A5A-9173-AEC93B661FFF"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DACFF6F5-BBCA-41DD-886F-BBC3331CF59E"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F94F2634-19D7-4192-9482-A2E5B2F32643"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "799BFE0D-9A8A-490C-822A-20323006A7F2"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03869FC3-75E3-44F7-8E65-EA90DA6152D6"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E55FCC6-8D3D-4094-9DC1-63E94E8092A0"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "044857B2-A1B3-4017-953D-67D70E16AAA9"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD94093A-523A-4878-9C01-F943B4CC8D11"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D59D8D21-4438-418F-9AC6-4543DA32E255"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEAD892F-F054-436A-8465-76D214C37A71"
},
{
"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "405092E2-81E9-4DF6-B4C8-1C11DC386255"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}