CVE-2020-17489

Katalog CVE

CVSS 4.3 · Medium EPSS 0,55%

Kerentanan Insufficiently Protected Credentials pada gnome-shell, canonical ubuntu linux +2 lainnya. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)

Rincian

Terbit di NVD

11 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997 exploit · patch · advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html advisory pihak ketiga
• https://security.gentoo.org/glsa/202009-08 advisory pihak ketiga
• https://usn.ubuntu.com/4464-1/ advisory pihak ketiga