CVE-2020-17489: Medium severity gnome-shell vulnerability
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-17489?
CVE-2020-17489 is a vulnerability discovered in certain configurations of GNOME gnome-shell through 3.36.4.
What is the severity of CVE-2020-17489?
The severity of CVE-2020-17489 is medium with a CVSS score of 4.3.
How does CVE-2020-17489 affect the affected software?
CVE-2020-17489 affects GNOME gnome-shell versions 3.30.2-11~deb10u2, 3.38.6-1~deb11u1, 43.6-1~deb12u2, 44.5-2, 3.36.4-1ubuntu1~20.04.2, and 3.36.5-1.
How can I fix CVE-2020-17489?
To fix CVE-2020-17489, update your GNOME gnome-shell installation to version 3.36.5-1 or later.
Where can I find more information about CVE-2020-17489?
You can find more information about CVE-2020-17489 at the following references: [1] [2] [3]