An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gnome-shell | May 13, 2022 | Aug 11, 2020 | |
| Alpine Linux | alpine-linux-upgrade-gnome-shell | Sep 23, 2020 | Aug 11, 2020 | |
| Centos_linux | — | centos-upgrade-gnome-shellcentos-upgrade-gnome-shell-debuginfocentos-upgrade-gnome-shell-debugsource | May 13, 2022 | Aug 11, 2020 |
| Debian | debian-upgrade-gnome-shell | Sep 16, 2020 | Aug 11, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-gnome-base-gnome-shell | Sep 14, 2020 | Aug 11, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-gnome-gnome-shell-3-34-5-11-4-27-0-1-82-0 | Jan 19, 2021 | Aug 11, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-gnome-shell | May 18, 2022 | Aug 11, 2020 |
| Redhat_linux | redhat-upgrade-gnome-shellredhat-upgrade-gnome-shell-debuginforedhat-upgrade-gnome-shell-debugsource | May 13, 2022 | Aug 11, 2020 | |
| Rocky_linux | rocky-upgrade-gnome-shellrocky-upgrade-gnome-shell-debuginforocky-upgrade-gnome-shell-debugsource | Mar 5, 2024 | Aug 11, 2020 | |
| Suse | — | suse-upgrade-gnome-settings-daemonsuse-upgrade-gnome-settings-daemon-develsuse-upgrade-gnome-settings-daemon-langsuse-upgrade-gnome-shellsuse-upgrade-gnome-shell-calendarsuse-upgrade-gnome-shell-develsuse-upgrade-gnome-shell-lang | Nov 8, 2020 | Aug 11, 2020 |
| Ubuntu | ubuntu-upgrade-gnome-shell | Aug 19, 2020 | Aug 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub