{"id":"CVE-2008-7255","aliases":["EUVD-2008-7211","GHSA-2r6h-23v5-cm2p"],"status":"published","title":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout,...","description":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00318,"percentile":0.24951,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-255"],"published":"2010-04-20T16:00:00Z","modified":"2026-06-16T23:03:55Z","products":[{"vendor":"amsn","product":"amsn"}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=610067","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.amsn-project.net/forums/index.php?topic=5317.0","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960\u0026r2=10259\u0026pathrev=10259","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7255"},{"url":"https://github.com/advisories/GHSA-2r6h-23v5-cm2p"}],"sources":{"cve":[{"id":"CVE-2008-7255","description":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.","status":"published","published":"2010-04-20T16:00:00Z","modified":"2024-09-16T18:59:16.928Z","updated_at":"2026-11-02T14:34:48.505097Z"}],"euvd":[{"id":"EUVD-2008-7211","description":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.","status":"published","published":"2010-04-20T16:00:00Z","modified":"2024-09-16T18:59:16Z","updated_at":"2026-11-03T00:55:27.571827Z"}],"ghsa":[{"id":"GHSA-2r6h-23v5-cm2p","title":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout,...","description":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.","status":"published","published":"2022-05-17T05:50:40Z","modified":"2023-01-28T05:04:40Z","updated_at":"2026-11-02T14:44:13.169568Z"}],"nvd":[{"id":"CVE-2008-7255","description":"login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.","status":"published","published":"2010-04-20T16:30:00.413Z","modified":"2026-06-16T23:03:55.85Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:01:32.081314Z"}]}}