CVE-2019-3820
At a glance Severity MEDIUM 4.8 EPSS EPSS 0.50 % · percentile 43 (2026-10-28) State PUBLISHED Published 2019-02-06 Updated 2024-08-04 Assigner redhat NVD status Modified Description It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 4.8 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L redhat CVSS 3.1 MEDIUM 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L NVD · nvd@nist.gov (Primary) CVSS 3.0 MEDIUM 4.8 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L NVD · secalert@redhat.com (Secondary) CVSS 2.0 MEDIUM 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:* ≥ 3.15.91 < 3.30.3cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:* ≥ 3.31.0 < 3.31.5cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*Affected products
References
Sources
