Unauthorized Access to RDP TLS Certificate and Key via Inadequate Session Agent Validation

CVE-2024-5148

What is CVE-2024-5148?

A security flaw exists in the gnome-remote-desktop package where the system daemon inadequately validates session agents during the critical transition from the login screen to the user session. This oversight allows a malicious user on the same system to potentially take control of an RDP client connection. The improper validation can lead to exposure of sensitive RDP TLS certificates and keys to unauthorized users, undermining the integrity of remote desktop connections.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References