Lucene search
Ubuntu.comUB:CVE-2023-43090HistorySep 18, 2023 - 12:00 a.m.
CVE-2023-43090
2023-09-1800:00:00
ubuntu.com
ubuntu.com
13
gnome shell
lock screen
vulnerability
unauthenticated
local user
desktop session
keyboard shortcuts
screenshot tool
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
A vulnerability was found in GNOME Shell. GNOME Shell’s lock screen allows
an unauthenticated local user to view windows of the locked desktop session
by using keyboard shortcuts to unlock the restricted functionality of the
screenshot tool.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052067>
- <https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990>
Notes
| Author | Note |
|---|---|
| mdeslaur | While the upstream bug says gnome-shell 42 is affected, I could not reproduce the issue on jammy |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 23.04 | noarch | gnome-shell | < 44.3-0ubuntu1.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | gnome-shell | < 45.0-1ubuntu1 | UNKNOWN |
Related
osv
osv
CVE-2023-43090
2023-09-22 06:15:09
gnome-shell - security update
2023-09-18 00:00:00
gnome-extensions-45.0-2.1 on GA media
2024-06-15 00:00:00
redhatcve
redhatcve
CVE-2023-43090
2023-09-15 07:25:06
prion
prion
Design/Logic Flaw
2023-09-22 06:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-6395-1)
2023-09-22 00:00:00
Mageia: Security Advisory (MGASA-2023-0311)
2023-11-10 00:00:00
Debian: Security Advisory (DSA-5501-1)
2023-09-19 00:00:00
mageia
mageia
Updated gnome-shell packages fix a security vulnerability
2023-11-09 15:55:51
nessus
nessus
Debian DSA-5501-1 : gnome-shell - security update
2023-09-19 00:00:00
Ubuntu 23.04 : GNOME Shell vulnerability (USN-6395-1)
2023-09-21 00:00:00
vulnrichment
vulnrichment
veracode
veracode
Information Disclosure
2023-10-08 05:40:47
debiancve
debiancve
CVE-2023-43090
2023-09-22 06:15:09
alpinelinux
alpinelinux
CVE-2023-43090
2023-09-22 06:15:09
cve
cve
CVE-2023-43090
2023-09-22 06:15:09
debian
debian
[SECURITY] [DSA 5501-1] gnome-shell security update
2023-09-18 21:40:36
ubuntu
ubuntu
GNOME Shell vulnerability
2023-09-21 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-43090
2023-09-22 06:15:09
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
Related for UB:CVE-2023-43090