{"id":"CVE-2017-18021","details":"It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.","modified":"2026-07-08T15:09:52.886797Z","published":"2018-01-05T19:29:00.217Z","references":[{"type":"ADVISORY","url":"https://github.com/IJHack/QtPass/releases/tag/v1.2.1"},{"type":"ADVISORY","url":"https://qtpass.org/"},{"type":"FIX","url":"https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html"},{"type":"EVIDENCE","url":"https://github.com/IJHack/QtPass/issues/338"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ijhack/qtpass","events":[{"introduced":"0"},{"fixed":"d2fedb267507e3d785fa5c0edaf9405419673dfd"}],"database_specific":{"cpe":"cpe:2.3:a:qtpass:qtpass:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.2.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.2.0","v1.1.5","v1.1.4","v1.1.3","v1.1.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18021.json","vanir_signatures_modified":"2026-07-08T15:09:52Z","vanir_signatures":[{"source":"https://github.com/ijhack/qtpass/commit/d2fedb267507e3d785fa5c0edaf9405419673dfd","target":{"file":"src/util.cpp"},"deprecated":false,"digest":{"line_hashes":["80125496234744497265827140466170114610","287883193721141034764457499761407571326","248874692902754335915256257760458802718","160561035135637604763182328094319091239"],"threshold":0.9},"id":"CVE-2017-18021-76ec6332","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}