Lucene search

K
redhatcveRedhat.comRH:CVE-2024-5148
HistoryMay 21, 2024 - 5:10 p.m.

CVE-2024-5148

2024-05-2117:10:52
redhat.com
access.redhat.com
35
gnome-remote-desktop
system daemon
inadequate validation
session agents
d-bus methods
rdp tls certificate
key
unauthorized access

6.3 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and key can be exposed to unauthorized users. This flaw allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

6.3 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%