NetSight
IP …
medium4.3

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions.

Impact

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Affected products

VendorProductAffected versions
GnomeGnome-Shell
from 3.15.91 before 3.30.3
from 3.31.0 before 3.31.5
OpensuseLeap
Versions 15.0, 15.1, 42.3
CanonicalUbuntu Linux
Versions 18.04, 18.10

Weakness classification

CWE-285CWE-287

References