CVE-2008-7320 describes a vulnerability in GNOME Seahorse through version 3.30, allowing a physically proximate attacker to read plaintext passwords from an unattended workstation if the keyring is unlocked, leveraging the quickAllow dialog. This medium-severity vulnerability (CVSS 6.8) has a physical attack vector and high impact on confidentiality, integrity, and availability, though a software maintainer disputes it as a design decision. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, with only one community mention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.30CPE matchmatch criteria | cpe:2.3:a:gnome:seahorse:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.