This vulnerability affects the django-blog-zinnia project maintained by Fantomas42, impacting all versions from 0.1 through 0.20. The issue lies in the Protected Entry Password Handler's implementation, where sensitive information is stored in cleartext, potentially exposing it to unauthorized local users. The vulnerability requires local attack vector with low attack complexity and no user interaction. The vendor has been informed but has not yet responded or provided remediation guidance.

Sensitive information handled by the Protected Entry Password Handler may be exposed in cleartext on the local system, increasing the risk of unauthorized disclosure if an attacker gains local access. The vulnerability does not allow remote exploitation or privilege escalation by itself but compromises confidentiality of sensitive data stored locally.

No official fix or patch is currently available. Since the vendor has not responded or provided remediation guidance, users should restrict local access to affected systems and monitor for any updates from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.