{"id":"CVE-2017-1000025","details":"GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.","modified":"2026-10-24T10:31:03.519250928Z","published":"2017-07-17T13:18:16.703Z","database_specific":{},"references":[{"type":"ADVISORY","url":"https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/silver"},{"type":"REPORT","url":"https://bugzilla.gnome.org/show_bug.cgi?id=752738"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/epiphany","events":[{"introduced":"39efde6540a6b24d804f9676e2f330a26d9f1baf"},{"last_affected":"acfe39787a2891d3411d3d665b625d2ce2cf94d2"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:gnome:epiphany:3.18.0:*:*:*:*:*:*:*","range":[{"introduced":"3.18.0"},{"last_affected":"3.18.0"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.18.1"},{"last_affected":"3.18.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.1:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.18.2"},{"last_affected":"3.18.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.2:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.18.3:*:*:*:*:*:*:*","range":[{"introduced":"3.18.3"},{"last_affected":"3.18.3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.18.4:*:*:*:*:*:*:*","range":[{"introduced":"3.18.4"},{"last_affected":"3.18.4"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.18.5:*:*:*:*:*:*:*","range":[{"introduced":"3.18.5"},{"last_affected":"3.18.5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.18.6:*:*:*:*:*:*:*","range":[{"introduced":"3.18.6"},{"last_affected":"3.18.6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.7:*:*:*:*:*:*:*","range":[{"introduced":"3.18.7"},{"last_affected":"3.18.7"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.8:*:*:*:*:*:*:*","range":[{"introduced":"3.18.8"},{"last_affected":"3.18.8"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.9:*:*:*:*:*:*:*","range":[{"introduced":"3.18.9"},{"last_affected":"3.18.9"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.18.10:*:*:*:*:*:*:*","range":[{"introduced":"3.18.10"},{"last_affected":"3.18.10"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.20.0:*:*:*:*:*:*:*","range":[{"introduced":"3.20.0"},{"last_affected":"3.20.0"}]},{"cpe":"cpe:2.3:a:gnome:epiphany:3.20.1:*:*:*:*:*:*:*","range":[{"introduced":"3.20.1"},{"last_affected":"3.20.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.20.2:*:*:*:*:*:*:*","range":[{"introduced":"3.20.2"},{"last_affected":"3.20.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.20.3:*:*:*:*:*:*:*","range":[{"introduced":"3.20.3"},{"last_affected":"3.20.3"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.20.4:*:*:*:*:*:*:*","range":[{"introduced":"3.20.4"},{"last_affected":"3.20.4"}]},{"range":[{"introduced":"3.20.5"},{"last_affected":"3.20.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.20.5:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.20.6:*:*:*:*:*:*:*","range":[{"introduced":"3.20.6"},{"last_affected":"3.20.6"}]},{"cpe":"cpe:2.3:a:gnome:epiphany:3.22.0:*:*:*:*:*:*:*","range":[{"introduced":"3.22.0"},{"last_affected":"3.22.0"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:gnome:epiphany:3.22.1:*:*:*:*:*:*:*","range":[{"introduced":"3.22.1"},{"last_affected":"3.22.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.22.2:*:*:*:*:*:*:*","range":[{"introduced":"3.22.2"},{"last_affected":"3.22.2"}]},{"cpe":"cpe:2.3:a:gnome:epiphany:3.22.3:*:*:*:*:*:*:*","range":[{"introduced":"3.22.3"},{"last_affected":"3.22.3"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.22.4"},{"last_affected":"3.22.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.22.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.22.5"},{"last_affected":"3.22.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.22.5:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.23.1"},{"last_affected":"3.23.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.1.1:*:*:*:*:*:*:*","range":[{"introduced":"3.23.1.1"},{"last_affected":"3.23.1.1"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.1.2:*:*:*:*:*:*:*","range":[{"introduced":"3.23.1.2"},{"last_affected":"3.23.1.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.2:*:*:*:*:*:*:*","range":[{"introduced":"3.23.2"},{"last_affected":"3.23.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.2.1:*:*:*:*:*:*:*","range":[{"introduced":"3.23.2.1"},{"last_affected":"3.23.2.1"}]},{"cpe":"cpe:2.3:a:gnome:epiphany:3.23.3:*:*:*:*:*:*:*","range":[{"introduced":"3.23.3"},{"last_affected":"3.23.3"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:gnome:epiphany:3.23.4:*:*:*:*:*:*:*","range":[{"introduced":"3.23.4"},{"last_affected":"3.23.4"}]}]}}],"versions":["3.18.0","3.18.1","3.18.10","3.18.2","3.18.3","3.18.4","3.18.5","3.18.6","3.18.7","3.18.8","3.18.9","3.20.0","3.20.1","3.20.2","3.20.3","3.20.4","3.20.5","3.20.6","3.22.0","3.22.1","3.22.2","3.22.3","3.22.4","3.22.5","3.23.1","3.23.1.1","3.23.1.2","3.23.2","3.23.2.1","3.23.3","3.23.4","3.21.4","3.21.3","3.21.2","3.21.1","3.19.92","3.19.91","3.19.90","3.19.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000025.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}