CVE-2008-7320

** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read...

6.8 MediumDisputed

GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision

Attack profile

How easy it is to exploit

Attack vector: Physical
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.46%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2008-7320
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-255
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-7320
Updated: 2026-11-02

EUVDEUVD-2008-7271 No score

Record: EUVD-2008-7271
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c9x4-9vpx-fj98 6.8

** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read...

** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision.

Record: GHSA-c9x4-9vpx-fj98
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 6.8

Record: CVE-2008-7320
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-7320 6.8

Record: DEBIAN-CVE-2008-7320
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

gnome seahorse

Affected packages

Affected packages
Package	Affected	Fixed
`seahorse` Debian:12	All versions, plus listed versions 43.0-143.0-243.0-343.0-447.0.1-147.0.1-247.0.1-347.0.1-4	None known
`seahorse` Debian:13	All versions, plus listed versions 47.0.1-247.0.1-347.0.1-4	None known
`seahorse` Debian:14	All versions, plus listed versions 47.0.1-247.0.1-347.0.1-4	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-7320 is a medium vulnerability (CVSS 6.8) in Gnome Seahorse, published November 18, 2018. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile.