CVEvulnerability
CVE-2008-7320
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision
Affected configurations
• gnome seahorse (<= 3.30)
Related
Weakness · not in database (1)
References
- https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774 Issue Tracking, Third Party Advisory
- https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13 Issue Tracking, Third Party Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=551036 Issue Tracking, Vendor Advisory
- https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification Third Party Advisory
- https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774 Issue Tracking, Third Party Advisory
- https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13 Issue Tracking, Third Party Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=551036 Issue Tracking, Vendor Advisory
- https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification Third Party Advisory