Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hpr5-wwh9-pjhf

Опубликовано: 19 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

EPSS

Процентиль: 8%
0.00029
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-667

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 4 года назад

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

CVSS3: 5.7
redhat
больше 4 лет назад

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

CVSS3: 6.1
nvd
почти 4 года назад

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

CVSS3: 6.1
debian
почти 4 года назад

A locking protection bypass flaw was found in some versions of gnome-s ...

EPSS

Процентиль: 8%
0.00029
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-667