CVE-2021-20315
N/A
N/A
Summary
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | gnome-shell | gnome-shell 3.32.2-40.el8 | affected |
Weaknesses
- CWE-667: CWE-667
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.