Lucene search

RedhatCVELIST:CVE-2021-20315

HistoryFeb 18, 2022 - 12:00 a.m.

CVE-2021-20315

2022-02-1800:00:00

CWE-667

redhat

www.cve.org

gnome-shell

centos stream 8

locking protection bypass

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the “Application menu” or “Window list” GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "gnome-shell",
    "versions": [
      {
        "version": "gnome-shell 3.32.2-40.el8",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2006285