CVE-2020-14391
First published: Thu Aug 27 2020(Updated: )
A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface. This flaw allows a local attacker to discover the Red Hat Customer Portal password. The highest threat from this vulnerability is to confidentiality.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNOME Control Center | ||
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux Aus | =8.2 | |
| Redhat Enterprise Linux Eus | =8.2 | |
| Redhat Enterprise Linux Tus | =8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-14391.
What is the severity of CVE-2020-14391?
The severity of CVE-2020-14391 is medium.
How does CVE-2020-14391 impact Red Hat Enterprise Linux 8?
CVE-2020-14391 allows a local attacker to discover Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface.
What software is affected by CVE-2020-14391?
The GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2 is affected by CVE-2020-14391.
How can I mitigate the vulnerability CVE-2020-14391?
Update to Red Hat Enterprise Linux 8.2 or later to fix the vulnerability CVE-2020-14391.
- collector/nvd-index
- agent/references
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-14391
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/gnome
- canonical/gnome control center
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.0
- canonical/redhat enterprise linux aus
- version/redhat enterprise linux aus/8.2
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/8.2
- canonical/redhat enterprise linux tus
- version/redhat enterprise linux tus/8.2