Published: 22/09/2023 Updated: 26/09/2023

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome gnome-shell
gnome gnome-shell 42
fedoraproject fedora 37
fedoraproject fedora 38

Debian Bug report logs - #1052067 gnome-shell: CVE-2023-43090: screenshot tool allows viewing open windows when session is locked Package: src:gnome-shell; Maintainer for src:gnome-shell is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> D ...

Mickael Karatekin discovered that the GNOME session locking didn't restrict a keyboard shortcut used for taking screenshots in GNOME Screenshot which could result in information disclosure The oldstable distribution (bullseye) is not affected For the stable distribution (bookworm), this problem has been fixed in version 436-1~deb12u2 We recomme ...

DescriptionA vulnerability was found in GNOME Shell GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot toolA vulnerability was found in GNOME Shell GNOME Shell's lock screen allows an unauthenticat ...

NVD-CWE-noinfo https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 https://access.redhat.com/security/cve/CVE-2023-43090 https://bugzilla.redhat.com/show_bug.cgi?id=2239087 https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052067 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5501

CVE-2023-43090

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect