CVE-2023-43090

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-43090
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2023-43090 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239087 Issue Tracking Third Party Advisory
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 Exploit Issue Tracking Patch Vendor Advisory
https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 Patch Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-43090 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239087 Issue Tracking Third Party Advisory
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 Exploit Issue Tracking Patch Vendor Advisory
https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome-shell:42:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
History

21 Nov 2024, 08:23

Type Values Removed Values Added
References () https://access.redhat.com/security/cve/CVE-2023-43090 - Third Party Advisory () https://access.redhat.com/security/cve/CVE-2023-43090 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - Issue Tracking, Third Party Advisory
References () https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - Exploit, Issue Tracking, Patch, Vendor Advisory () https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 - Patch, Vendor Advisory () https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 - Patch, Vendor Advisory

03 Jul 2024, 01:41

Type Values Removed Values Added
CWE CWE-862

26 Sep 2023, 13:10

Type Values Removed Values Added
References (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - Exploit, Issue Tracking, Patch, Vendor Advisory
References (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 - (MISC) https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 - Patch, Vendor Advisory
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - Issue Tracking, Third Party Advisory
References (MISC) https://access.redhat.com/security/cve/CVE-2023-43090 - (MISC) https://access.redhat.com/security/cve/CVE-2023-43090 - Third Party Advisory
First Time Fedoraproject fedora
Gnome
Fedoraproject
Gnome gnome-shell
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome-shell:42:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

22 Sep 2023, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-09-22 06:15

Updated : 2024-11-21 08:23

NVD link : CVE-2023-43090

Mitre link : CVE-2023-43090

CVE.ORG link : CVE-2023-43090

JSON object : View

Products Affected

gnome

  • gnome-shell

fedoraproject

  • fedora
CWE
NVD-CWE-noinfo CWE-862

Missing Authorization