[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-17489":6},{"stargazers_count":4,"fetched_at":5},5,"2026-04-08T08:11:26.341Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":71,"aliases":81,"duplicate_of":9,"upstream":82,"downstream":83,"duplicates":100,"related":101,"reserved_at":9,"published_at":107,"modified_at":108,"state":109,"summary":110,"references_raw":118,"kevs":149,"epss":150,"epss_history":153,"metrics":414,"affected":425},"CVE-2020-17489","An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","weakness","Incomplete","Class",[19,23,27,31,35,39,43,47,51,55,59,63,67],{"id":20,"name":21,"techniques":22},"CAPEC-102","Session Sidejacking",[],{"id":24,"name":25,"techniques":26},"CAPEC-474","Signature Spoofing by Key Theft",[],{"id":28,"name":29,"techniques":30},"CAPEC-50","Password Recovery Exploitation",[],{"id":32,"name":33,"techniques":34},"CAPEC-509","Kerberoasting",[],{"id":36,"name":37,"techniques":38},"CAPEC-551","Modify Existing Service",[],{"id":40,"name":41,"techniques":42},"CAPEC-555","Remote Services with Stolen Credentials",[],{"id":44,"name":45,"techniques":46},"CAPEC-560","Use of Known Domain Credentials",[],{"id":48,"name":49,"techniques":50},"CAPEC-561","Windows Admin Shares with Stolen Credentials",[],{"id":52,"name":53,"techniques":54},"CAPEC-600","Credential Stuffing",[],{"id":56,"name":57,"techniques":58},"CAPEC-644","Use of Captured Hashes (Pass The Hash)",[],{"id":60,"name":61,"techniques":62},"CAPEC-645","Use of Captured Tickets (Pass The Ticket)",[],{"id":64,"name":65,"techniques":66},"CAPEC-652","Use of Known Kerberos Credentials",[],{"id":68,"name":69,"techniques":70},"CAPEC-653","Use of Known Operating System Credentials",[],[72],{"_key":73,"name":74,"source":75,"url":76,"maturity":77,"reliability_score":78,"verified":79,"type":9,"platforms":80,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_60D4F8578BD0EF40","Exploit Reference (gitlab.gnome.org)","reference","https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997","unknown",0.2,false,[],[],[],[84,86,88,90,92,94,96,98],{"_key":85},"RHSA-2022:1814",{"_key":87},"DEBIAN-CVE-2020-17489",{"_key":89},"SUSE-SU-2020:3132-1",{"_key":91},"UBUNTU-CVE-2020-17489",{"_key":93},"USN-4464-1",{"_key":95},"OPENSUSE-SU-2020:1861-1",{"_key":97},"OPENSUSE-SU-2024:10797-1",{"_key":99},"DLA-2374-1",[],[102,104,105,106],{"_key":103},"MGASA-2021-0316",{"_key":89},{"_key":95},{"_key":97},"2020-08-11T20:07:26.000Z","2024-08-04T14:00:47.469Z","Modified",{"cisa_kev":79,"cisa_ransomware":79,"cisa_vendor":9,"epss_severity":111,"epss_score":112,"severity":113,"severity_score":114,"severity_version":115,"severity_source":116,"severity_vector":117,"severity_status":109},"low",0.00149,"medium",4.3,"v3.1","nvd","CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",[119,127,133,138,144],{"url":76,"sources":120,"tags":122},[121,116],"cve.org",[123,124,125,126],"X Refsource MISC","Exploit","Patch","Vendor Advisory",{"url":128,"sources":129,"tags":130},"https://usn.ubuntu.com/4464-1/",[121,116],[126,131,132],"X Refsource UBUNTU","Third Party Advisory",{"url":134,"sources":135,"tags":136},"https://security.gentoo.org/glsa/202009-08",[121,116],[126,137,132],"X Refsource GENTOO",{"url":139,"sources":140,"tags":141},"https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html",[121,116],[142,143,132],"Mailing List","X Refsource MLIST",{"url":145,"sources":146,"tags":147},"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html",[121,116],[126,148,132],"X Refsource SUSE",[],{"date":151,"score":112,"percentile":152},"2026-04-07",0.35396,[154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,200,203,206,208,211,214,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,260,263,265,268,271,274,277,279,282,285,288,291,293,295,298,301,304,306,310,312,315,318,321,324,327,330,333,336,339,342,344,347,349,352,355,358,361,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411],{"date":155,"score":112,"percentile":156},"2025-11-04",0.36003,{"date":158,"score":112,"percentile":159},"2025-11-05",0.35992,{"date":161,"score":112,"percentile":162},"2025-11-06",0.35989,{"date":164,"score":112,"percentile":165},"2025-11-07",0.36017,{"date":167,"score":112,"percentile":168},"2025-11-08",0.3601,{"date":170,"score":112,"percentile":171},"2025-11-09",0.35993,{"date":173,"score":112,"percentile":174},"2025-11-10",0.3596,{"date":176,"score":112,"percentile":177},"2025-11-11",0.35985,{"date":179,"score":112,"percentile":180},"2025-11-12",0.36023,{"date":182,"score":112,"percentile":183},"2025-11-13",0.36039,{"date":185,"score":112,"percentile":186},"2025-11-14",0.36042,{"date":188,"score":112,"percentile":189},"2025-11-15",0.36043,{"date":191,"score":112,"percentile":192},"2025-11-16",0.36021,{"date":194,"score":112,"percentile":195},"2025-11-17",0.35997,{"date":197,"score":198,"percentile":199},"2025-11-18",0.00082,0.20105,{"date":201,"score":198,"percentile":202},"2025-11-19",0.20119,{"date":204,"score":198,"percentile":205},"2025-11-20",0.20093,{"date":207,"score":112,"percentile":168},"2025-11-21",{"date":209,"score":112,"percentile":210},"2025-11-22",0.36013,{"date":212,"score":112,"percentile":213},"2025-11-23",0.3598,{"date":215,"score":112,"percentile":174},"2025-11-24",{"date":217,"score":112,"percentile":218},"2025-11-25",0.35962,{"date":220,"score":112,"percentile":221},"2025-11-26",0.35959,{"date":223,"score":112,"percentile":224},"2025-11-27",0.3597,{"date":226,"score":112,"percentile":227},"2025-11-28",0.35949,{"date":229,"score":112,"percentile":230},"2025-11-29",0.35931,{"date":232,"score":112,"percentile":233},"2025-11-30",0.35916,{"date":235,"score":112,"percentile":236},"2025-12-01",0.36028,{"date":238,"score":112,"percentile":239},"2025-12-02",0.36035,{"date":241,"score":112,"percentile":242},"2025-12-03",0.36032,{"date":244,"score":112,"percentile":245},"2025-12-04",0.35907,{"date":247,"score":112,"percentile":248},"2025-12-05",0.35937,{"date":250,"score":112,"percentile":251},"2025-12-06",0.35924,{"date":253,"score":112,"percentile":254},"2025-12-07",0.35895,{"date":256,"score":112,"percentile":257},"2025-12-08",0.3591,{"date":259,"score":112,"percentile":227},"2025-12-09",{"date":261,"score":112,"percentile":262},"2025-12-10",0.36006,{"date":264,"score":112,"percentile":242},"2025-12-11",{"date":266,"score":112,"percentile":267},"2025-12-12",0.36067,{"date":269,"score":112,"percentile":270},"2025-12-13",0.36046,{"date":272,"score":112,"percentile":273},"2025-12-14",0.36016,{"date":275,"score":112,"percentile":276},"2025-12-15",0.35975,{"date":278,"score":112,"percentile":262},"2025-12-16",{"date":280,"score":112,"percentile":281},"2025-12-17",0.36054,{"date":283,"score":112,"percentile":284},"2025-12-18",0.36096,{"date":286,"score":112,"percentile":287},"2025-12-19",0.36113,{"date":289,"score":112,"percentile":290},"2025-12-20",0.3609,{"date":292,"score":112,"percentile":239},"2025-12-21",{"date":294,"score":112,"percentile":168},"2025-12-22",{"date":296,"score":112,"percentile":297},"2025-12-23",0.36005,{"date":299,"score":112,"percentile":300},"2025-12-24",0.35998,{"date":302,"score":112,"percentile":303},"2025-12-25",0.36061,{"date":305,"score":112,"percentile":183},"2025-12-26",{"date":307,"score":308,"percentile":309},"2025-12-27",0.00154,0.3681,{"date":311,"score":112,"percentile":174},"2025-12-28",{"date":313,"score":112,"percentile":314},"2025-12-29",0.35932,{"date":316,"score":112,"percentile":317},"2025-12-30",0.35921,{"date":319,"score":112,"percentile":320},"2025-12-31",0.35977,{"date":322,"score":112,"percentile":323},"2026-01-01",0.36117,{"date":325,"score":112,"percentile":326},"2026-01-02",0.36108,{"date":328,"score":112,"percentile":329},"2026-01-03",0.36094,{"date":331,"score":112,"percentile":332},"2026-01-04",0.35939,{"date":334,"score":112,"percentile":335},"2026-01-05",0.3592,{"date":337,"score":112,"percentile":338},"2026-01-06",0.35929,{"date":340,"score":112,"percentile":341},"2026-01-07",0.35947,{"date":343,"score":112,"percentile":320},"2026-01-08",{"date":345,"score":112,"percentile":346},"2026-01-09",0.35971,{"date":348,"score":112,"percentile":320},"2026-01-10",{"date":350,"score":112,"percentile":351},"2026-01-11",0.35957,{"date":353,"score":112,"percentile":354},"2026-01-12",0.35897,{"date":356,"score":112,"percentile":357},"2026-01-13",0.35884,{"date":359,"score":112,"percentile":360},"2026-01-14",0.35934,{"date":362,"score":112,"percentile":335},"2026-01-15",{"date":364,"score":112,"percentile":365},"2026-01-16",0.35938,{"date":367,"score":112,"percentile":368},"2026-01-17",0.35922,{"date":370,"score":112,"percentile":371},"2026-01-18",0.35863,{"date":373,"score":112,"percentile":374},"2026-01-19",0.35823,{"date":376,"score":112,"percentile":377},"2026-01-20",0.35805,{"date":379,"score":112,"percentile":380},"2026-01-21",0.35786,{"date":382,"score":112,"percentile":383},"2026-01-22",0.35772,{"date":385,"score":112,"percentile":386},"2026-01-23",0.3583,{"date":388,"score":112,"percentile":389},"2026-01-24",0.35839,{"date":391,"score":112,"percentile":392},"2026-01-25",0.35784,{"date":394,"score":112,"percentile":395},"2026-01-26",0.35718,{"date":397,"score":112,"percentile":398},"2026-01-27",0.35711,{"date":400,"score":112,"percentile":401},"2026-01-28",0.35691,{"date":403,"score":112,"percentile":404},"2026-01-29",0.35661,{"date":406,"score":112,"percentile":407},"2026-01-30",0.35656,{"date":409,"score":112,"percentile":410},"2026-01-31",0.35666,{"date":412,"score":112,"percentile":413},"2026-02-01",0.35776,[415],{"source":116,"cvss_v2_0":416,"cvss_v3_0":9,"cvss_v3_1":421,"cvss_v4_0":9},{"baseScore":417,"baseSeverity":9,"vectorString":418,"impactScore":419,"exploitabilityScore":420},1.9,"AV:L/AC:M/Au:N/C:P/I:N/A:N",2.9,3.4,{"baseScore":114,"baseSeverity":422,"vectorString":117,"impactScore":423,"exploitabilityScore":424},"MEDIUM",6,1.8,[426,435,442,452],{"ecosystem":9,"name":427,"vendor":428,"product":429,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":431},"ubuntu linux","canonical","ubuntu_linux","o",[432],{"version":433,"is_range":79,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"20.04","cpe",{"ecosystem":9,"name":436,"vendor":437,"product":438,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":439},"debian linux","debian","debian_linux",[440],{"version":441,"is_range":79,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"ecosystem":9,"name":443,"vendor":444,"product":443,"cpe_part":445,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":446},"gnome-shell","gnome","a",[447],{"version":448,"is_range":449,"range_type":434,"version_start":9,"version_start_type":9,"version_end":450,"version_end_type":451,"fixed_in":9},"lte3.36.4",true,"3.36.4","including",{"ecosystem":9,"name":453,"vendor":454,"product":453,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":455},"leap","opensuse",[456],{"version":457,"is_range":79,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.2"]