CVE-2021-20315CWE-667

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list"…

published February 18, 2022

CVSS
—
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Weakness
CWE-667 · Improper Locking
Published
2022-02-18T00:00Z
EPSS history
Timeline
  • 18 FEB 00:00Z
    A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list"…
    cvelistv5