CVE-2021-20315
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/02/2022
Last modified:
03/12/2022
Description
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
Impact
Base Score 3.x
6.10
Severity 3.x
MEDIUM
Base Score 2.0
3.60
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:* | 3.32.2 (excluding) | |
cpe:2.3:o:centos:stream:8:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page