CVE-2008-7320

Published: Nov 18, 2018Modified: Nov 21, 2024

6.8

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision

Affected (1)

Products: Gnome: Seahorse

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Seahorse	Up to 3.30

Related CWEs

References (8)

https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://bugzilla.gnome.org/show_bug.cgi?id=551036

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification

Source: cve@mitre.org

Third Party Advisory

https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://bugzilla.gnome.org/show_bug.cgi?id=551036

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.