CVE-2023-43090

Gnome-shell: screenshot tool allows viewing open windows when session is locked

State: Published
Severity: 5.5 Medium
Published: Sep 22, 2023
Updated: Aug 2, 2024
Reserved: Sep 15, 2023

Description

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	fedora

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
gnome-shell	before 42.*Affected 43.0 to before 43.9Affected 44.0 to before 44.5Affected

References

https://access.redhat.com/security/cve/CVE-2023-43090vdb-entry
RHBZ#2239087issue-tracking
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990
https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.