An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell | May 13, 2022 | Aug 11, 2020 |
| Alpine Linux | — | Upgrade gnome-shell | Sep 23, 2020 | Aug 11, 2020 |
| Centos_linux | — | Upgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell | May 13, 2022 | Aug 11, 2020 |
| Debian | — | Upgrade gnome-shell | Sep 16, 2020 | Aug 11, 2020 |
| Gentoo Linux | — | Upgrade gnome-base/gnome-shell. | Sep 14, 2020 | Aug 11, 2020 |
| Oracle Solaris | — | Upgrade gnome/gnome-shell to version 3.34.5-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 11, 2020 |
| Oracle_linux | — | Upgrade gnome-shell | May 18, 2022 | Aug 11, 2020 |
| Redhat_linux | — | Upgrade gnome-shell-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-shell | May 13, 2022 | Aug 11, 2020 |
| Rocky_linux | — | Upgrade gnome-shellUpgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsource | Mar 5, 2024 | Aug 11, 2020 |
| Suse | — | Upgrade gnome-shell-develUpgrade gnome-settings-daemon-langUpgrade gnome-shellUpgrade gnome-settings-daemonUpgrade gnome-shell-langUpgrade gnome-shell-calendarUpgrade gnome-settings-daemon-devel | Nov 8, 2020 | Aug 11, 2020 |
| Ubuntu | — | Upgrade gnome-shell | Aug 19, 2020 | Aug 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub