cve/2023/CVE-2023-38840.md

CVE-2023-38840

Description

Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.

POC

Reference

• https://github.com/bitwarden/clients/pull/5813
• https://github.com/markuta/bw-dump
• https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/

Github

• https://github.com/markuta/bw-dump
• https://github.com/nomi-sec/PoC-in-GitHub