DEBIAN-CVE-2020-17489

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2020-17489
Downstream
DLA-2374-1
Published: 11 Aug 2020, 21:15
Last modified:19 Nov 2025, 02:04

Vulnerability Summary

Overall Risk (default)
low
17/100
CVSS Score
4.3 MEDIUM
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 Aug 2020, 21:15
Published
Vulnerability first disclosed
19 Nov 2025, 02:04
Last Modified
Vulnerability information updated

Description

An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.3CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Systems

  • debian•gnome-shell

    < 3.36.5-1 | < 3.36.5-1 | < 3.36.5-1 | < 3.36.5-1

References (1)