CVE-2019-3820 MEDIUM

CVE-2019-3820

Vendor The Gnome Project
Product gnome-shell
Weakness CWE-285
Published February 6, 2019
Last update August 4, 2024

CVSS base score

4.8/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Key dates

02Disclosure timeline

February 6, 2019 CVE published
August 4, 2024 Record updated