CVE-2023-43090

MEDIUM 5.5

Gnome-shell: screenshot tool allows viewing open windows when session is locked

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

Published	Sep 22, 2023
Last Updated	Aug 2, 2024

Stay Ahead of the Next One

Get instant alerts for

Be the first to know when new medium vulnerabilities are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

References

NVD ↗ CVE.org ↗ EPSS Data ↗

access.redhat.com: https://access.redhat.com/security/cve/CVE-2023-43090 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2239087 gitlab.gnome.org: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 gitlab.gnome.org: https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944

Credits

Red Hat would like to thank Mickael Karatekin (SysDream) for reporting this issue.