After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 604843 - Password not hidden properly on seahorse 2.28.1 (Manager encryption keys)
Password not hidden properly on seahorse 2.28.1 (Manager encryption keys)
Status: RESOLVED DUPLICATE of bug 627117
Product: seahorse
Classification: Applications
Component: general
2.28.x
Other Linux
: Normal normal
: 2.26.0
Assigned To: Seahorse Maintainer
Seahorse Maintainer
Depends on:
Blocks:
 
 
Reported: 2009-12-17 17:02 UTC by D. H. B. Marcos
Modified: 2010-12-13 17:13 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description D. H. B. Marcos 2009-12-17 17:02:39 UTC
Informations about system and package:

Ubuntu 9.10 - o Karmic Koala

seahorse: 2.28.1-0ubuntu1
gnome-keyring: 2.28.1-0ubuntu1



Password not hidden properly on seahorse 2.28.1 (Manager encryption keys)

Steps for reproduction:

1) Open the Seahorse;
2) In password tab, in password session, click right button mouse in password item and select Properties (or click in Properties tool bar button);
3) Open password item. Will be open the Access Authorization dialog box. Select Authorize once;
4) Select Show password and you password show in Password text box, as expected.
5) Close the dialog box an repeat step 2;
6) Open password item. Will be open the Access Authorization dialog box. Now select Deny;
7) Select Show password. You will see your password in Password text box, but without permission.

This Bug allow access to personal passwords, and this allow full access to the confidential services use.
Comment 1 Fabio Durán Verdugo 2009-12-17 18:02:23 UTC
Yes Is true, I can confirm this, if you press deny for second time the password is shown.
Comment 2 Adam Schreiber 2009-12-20 15:49:31 UTC
This occurs with any key ring not just the session keyring.  Closing and re-opening seahorse doesn't expose the password after hitting deny.  I'm marking the severity down from critical as all someone has to do to get this information is open seahorse and select allow.
Comment 3 Stef Walter 2010-12-13 17:13:08 UTC

*** This bug has been marked as a duplicate of bug 627117 ***