CVE-2024-39846: NewPass before 1.2.0 improperly stores passwords, making it vulnerable to unauthorized access. Instead of using secure password hashes, the application stores passwords directly, simplifying the process for attackers to obtain sensitive information. While data is encrypted at rest, it's decrypted in process memory during use, exposing the passwords.

Although the CVSS score is 0, implying low severity, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a moderate risk, particularly considering its presence "In The Wild." This indicates active exploitation or the potential for exploitation. Organizations using NewPass versions prior to 1.2.0 should prioritize upgrading to mitigate the risk of password compromise and subsequent breaches. The significance lies in the direct exposure of passwords, making it easier for attackers to gain unauthorized access. Timely patching is crucial.