Local Information Disclosure Flaw in GNOME Control Center - Red Hat
CVE-2020-14391

5.5MEDIUM

Key Information:

Vendor

Gnome
Status
Gnome-settings-daemon
Vendor
CVE Published:
8 February 2021

What is CVE-2020-14391?

A vulnerability in the GNOME Control Center of Red Hat Enterprise Linux 8 versions prior to 8.2 allows local attackers to exploit improper handling of Red Hat Customer Portal credentials during system registration. This flaw can lead to unauthorized discovery of sensitive passwords, thus compromising the confidentiality of user credentials and raising serious security concerns for systems utilizing this product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

gnome-settings-daemon Red Hat Enterprise Linux 8 versions prior to 8.2

References

https://bugzilla.redhat.com/show_bug.cgi?id=1873093
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.