Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3820

Опубликовано: 06 фев. 2019
Источник: nvd
CVSS3: 4.8
CVSS3: 4.3
CVSS2: 4.6
EPSS Низкий

Описание

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*
Версия от 3.15.91 (включая) до 3.30.3 (исключая)
cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*
Версия от 3.31.0 (включая) до 3.31.5 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.0005
Низкий

4.8 Medium

CVSS3

4.3 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-285
CWE-287

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 6 лет назад

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

CVSS3: 4.8
redhat
больше 6 лет назад

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

CVSS3: 4.3
debian
больше 6 лет назад

It was discovered that the gnome-shell lock screen since version 3.15. ...

suse-cvrf
около 6 лет назад

Security update for gnome-shell

suse-cvrf
около 6 лет назад

Security update for gnome-shell

EPSS

Процентиль: 16%
0.0005
Низкий

4.8 Medium

CVSS3

4.3 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-285
CWE-287