Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-3820
HistoryFeb 06, 2019 - 8:29 p.m.

CVE-2019-3820

2019-02-0620:29:00
CWE-287
CWE-285
[email protected]
web.nvd.nist.gov
7

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

4.3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

44.4%

JSON

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Affected configurations

Nvd
Node
gnomegnome-shellRange3.15.91–3.30.3
OR
gnomegnome-shellRange3.31.0–3.31.5
Node
opensuseleapMatch15.0
OR
opensuseleapMatch15.1
OR
opensuseleapMatch42.3
Node
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch18.10

Related

nessus 34
oraclelinux 1
centos 1
prion 1
redhat 2
ubuntu 1
debiancve 1
openvas 8
redhatcve 1
cve 1
cvelist 1
ubuntucve 1
alpinelinux 1
veracode 1
suse 2
amazon 1
archlinux 1
osv 2
rocky 1
ibm 1
nessus
nessus
Amazon Linux 2 : gnome-shell (ALAS-2020-1478)
2020-08-26 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : gnome-shell Vulnerability (NS-SA-2020-0066)
2020-12-09 00:00:00
Ubuntu 18.04 LTS / 18.10 : gnome-shell vulnerability (USN-3966-1)
2019-05-07 00:00:00
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2020-04-06 00:00:00
centos
centos
LibRaw, accountsservice, colord, control, gdm, gnome, gsettings, gtk, gtk3, libcanberra, libgweather, mutter, nautilus, osinfo, shared, tracker, xchat security update
2020-04-08 17:41:15
prion
prion
Code injection
2019-02-06 20:29:00
redhat
redhat
(RHSA-2020:1021) Moderate: GNOME security, bug fix, and enhancement update
2020-03-31 09:09:34
(RHSA-2019:3553) Low: GNOME security, bug fix, and enhancement update
2019-11-05 17:59:21
ubuntu
ubuntu
GNOME Shell vulnerability
2019-05-06 00:00:00
debiancve
debiancve
CVE-2019-3820
2019-02-06 20:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for gnome-shell (EulerOS-SA-2020-2547)
2020-12-15 00:00:00
Huawei EulerOS: Security Advisory for gnome-shell (EulerOS-SA-2021-1301)
2021-02-22 00:00:00
openSUSE: Security Advisory for gnome-shell (openSUSE-SU-2019:1582-1)
2019-06-19 00:00:00
redhatcve
redhatcve
CVE-2019-3820
2019-02-06 01:19:17
cve
cve
CVE-2019-3820
2019-02-06 20:29:00
cvelist
cvelist
CVE-2019-3820
2019-02-06 20:00:00
ubuntucve
ubuntucve
CVE-2019-3820
2019-02-06 00:00:00
alpinelinux
alpinelinux
CVE-2019-3820
2019-02-06 20:29:00
veracode
veracode
Authentication Bypass
2020-04-01 00:38:16
suse
suse
Security update for gnome-shell (moderate)
2019-06-18 00:00:00
Security update for gnome-shell (moderate)
2019-06-07 00:00:00
amazon
amazon
Medium: gnome-shell
2020-08-18 19:52:00
archlinux
archlinux
[ASA-201903-3] gdm: access restriction bypass
2019-03-03 00:00:00
osv
osv
Low: GNOME security, bug fix, and enhancement update
2019-11-05 17:59:21
Low: GNOME security, bug fix, and enhancement update
2019-11-05 17:59:21
rocky
rocky
GNOME security, bug fix, and enhancement update
2019-11-05 17:59:21
ibm
ibm
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-08-13 22:15:02

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

4.3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

44.4%

JSON
Related for NVD:CVE-2019-3820
nessus34oraclelinux1centos1prion1redhat2ubuntu1debiancve1openvas8redhatcve1cve1cvelist1ubuntucve1alpinelinux1veracode1suse2amazon1archlinux1osv2rocky1ibm1