CVEvulnerability
CVE-2023-43090
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-09-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-862
Description
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
Affected configurations
• gnome gnome-shell (>= 43 < 43.9)
• gnome gnome-shell (>= 44 < 44.5)
• gnome gnome-shell 42
• fedoraproject fedora 37
• fedoraproject fedora 38
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://access.redhat.com/security/cve/CVE-2023-43090 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2239087 Issue Tracking, Third Party Advisory
- https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 Patch, Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-43090 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2239087 Issue Tracking, Third Party Advisory
- https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 Patch, Vendor Advisory