Gnome-Shell Lock Screen Vulnerability in GNOME Software
CVE-2019-3820
4.8MEDIUM
Summary
A vulnerability exists in the Gnome-Shell lock screen that fails to adequately limit contextual actions for users with physical access to a locked workstation. As a result, an attacker could exploit certain keyboard shortcuts, and potentially other functionalities, to gain unauthorized access or perform unintended operations within the system, compromising the security intended by the lock screen.
Affected Version(s)
gnome-shell since 3.15.91
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved