PT-2019-6809 · Gnome · Gnome Keyring

Michael Gilbert · Published 2019-12-20 · Updated 2020-01-02 · CVE-2012-6111

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions gnome-keyring (affected versions not specified)

Description The issue concerns gnome-keyring not discarding stored secrets when using the gnome keyring lock all sync function. This could potentially lead to unauthorized access to sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-6111

Affected Products

Gnome Keyring

References · 12

• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6111 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2012-6111 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6111 · Security Note
• https://cve.org/CVERecord?id=CVE-2012-6111 · Security Note
• https://ubuntu.com/security/CVE-2012-6111 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-6111 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-6111 · Vendor Advisory
• http://openwall.com/lists/oss-security/2013/01/11/5 · Note
• https://t.me/cibsecurity/8807 · Telegram Post
• http://openwall.com/lists/oss-security/2013/01/17/4 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=690466 · Note