CVE-2018-19358

GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mechanisms (involving the busconfig and policy XML elements) are not used. NOTE: the vendor disputes this because, according to the security model, untrusted applications must not be allowed to access the user's session bus socket.

CVSS v3 7.8 HIGH
CVSS v2.0 2.1 LOW

7.8^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1780365	Exploit Issue Tracking Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1652194#c8
https://github.com/sungjungk/keyring_crack	Exploit Third Party Advisory
https://gitlab.gnome.org/GNOME/gnome-keyring/-/issues/5#note_1876550
https://www.youtube.com/watch?v=Do4E9ZQaPck	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:gnome:gnome-keyring:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-11-18 19:29

Updated : 2024-05-17 01:26

NVD link : CVE-2018-19358

Mitre link : CVE-2018-19358

CVE.ORG link : CVE-2018-19358

JSON object : View

Products Affected

gnome

gnome-keyring

CWE

NVD-CWE-noinfo

{"id": "CVE-2018-19358", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2018-11-18T19:29:00.297", "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1780365", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1652194#c8", "source": "cve@mitre.org"}, {"url": "https://github.com/sungjungk/keyring_crack", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://gitlab.gnome.org/GNOME/gnome-keyring/-/issues/5#note_1876550", "source": "cve@mitre.org"}, {"url": "https://www.youtube.com/watch?v=Do4E9ZQaPck", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mechanisms (involving the busconfig and policy XML elements) are not used. NOTE: the vendor disputes this because, according to the security model, untrusted applications must not be allowed to access the user's session bus socket."}, {"lang": "es", "value": "GNOME Keyring hasta la versi\u00f3n 3.28.2 permite que usuarios locales recuperen las credenciales de inicio de sesi\u00f3n mediante una llamada API Secret Service y la interfaz D-Bus si el keyring est\u00e1 desbloqueado. Este problema es similar a CVE-2008-7320. Una perspectiva es que esto ocurre debido a que los mecanismos de protecci\u00f3n disponibles para D-Bus (relacionados con los elementos XML busconfig y policy) no se emplean."}], "lastModified": "2024-05-17T01:26:03.640", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gnome:gnome-keyring:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "683C2CDF-52DB-4EDE-86C2-BDE3A35D3B52", "versionEndIncluding": "3.28.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}