CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default

Critical · published January 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

🔥 By default, the gnome-control-center in Ubuntu enabled Remote Desktop Sharing, turning your system into an open invitation for attackers! Think of it like leaving your front door wide open without even realizing it — anyone walking by can just stroll right in and take a look around. If they have malicious intent, that could lead to serious consequences! An attacker could exploit this oversight to gain unauthorized access to your desktop environment, potentially accessing sensitive files, installing malicious software, or even locking you out altogether. It's absolutely devastating — your entire system could be at risk!

Put simply

Think of it like leaving your front door wide open without even realizing it — anyone walking by can just stroll right in and take a look around. If they have malicious intent, that could lead to serious consequences! This vulnerability allows Remote Desktop Sharing to be enabled by default in Ubuntu, creating an unintentional security risk for users who may not be aware that remote access is active without their consent.

What to do

An attacker could exploit this oversight to gain unauthorized access to your desktop environment, potentially accessing sensitive files, installing malicious software, or even locking you out altogether. It's absolutely devastating — your entire system could be at risk! To secure your system, immediately disable Remote Desktop Sharing in gnome-control-center and ensure that only authorized users can access your desktop. Consider updating to the latest version that addresses this flaw, and double-check your system settings to prevent future issues. You've got this! By taking these steps, you're stepping up as a security hero and protecting your digital space! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Published
2025-01-31T01:35Z
EPSS history
Timeline
  • 31 JAN 01:35Z
    Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default
    cvelistv5