A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2023-43090 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2239087 | Issue Tracking Third Party Advisory |
| https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 | Exploit Issue Tracking Patch Vendor Advisory |
| https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 | Patch Vendor Advisory |
Configurations
History
26 Sep 2023, 13:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:* cpe:2.3:a:gnome:gnome-shell:42:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| First Time |
Fedoraproject
Fedoraproject fedora Gnome gnome-shell Gnome |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - Exploit, Issue Tracking, Patch, Vendor Advisory | |
| References | (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 - Patch, Vendor Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2023-43090 - Third Party Advisory |
22 Sep 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-22 06:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-43090
Mitre link : CVE-2023-43090
CVE.ORG link : CVE-2023-43090
JSON object : View
Products Affected
gnome
- gnome-shell
fedoraproject
- fedora
CWE