GCVE-110-MAGEIA-2020-371

Advisory Published

Vulnetix · Advisory published September 27, 2020

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of the password (CVE-2020-12755).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	kio-extras	0 (affected), 19.04.0-1.1.mga7 (unaffected)	—

Aliases

CVE-2020-12755

References

Updated kio-extras packages fix security vulnerability

advisory

Updated kio-extras packages fix security vulnerability

issue

Updated kio-extras packages fix security vulnerability

issue

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON