CVE-2020-17489 Details
Description
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html | CVE | Third Party Advisory |
| https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997 | CVE | ExploitPatchVendor Advisory |
| https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html | CVE | Third Party Advisory |
| https://security.gentoo.org/glsa/202009-08 | CVE | Third Party Advisory |
| https://usn.ubuntu.com/4464-1/ | CVE | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html | [email protected] | Third Party Advisory |
| https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997 | [email protected] | ExploitPatchVendor Advisory |
| https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html | [email protected] | Third Party Advisory |
| https://security.gentoo.org/glsa/202009-08 | [email protected] | Third Party Advisory |
| https://usn.ubuntu.com/4464-1/ | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-522 | Insufficiently Protected Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| gnome gnome-shell | <= 3.36.4 |
CPE
Remediation
| |
| canonical ubuntu linux | 20.04 |
CPE
Remediation
| |
| debian debian linux | 9.0 |
CPE
Remediation
| |
| opensuse leap | 15.2 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 26, 2021 | Modified Analysis | [email protected] |
| Nov 7, 2020 | CVE Modified | [email protected] |
| Sep 15, 2020 | CVE Modified | [email protected] |
| Sep 14, 2020 | CVE Modified | [email protected] |
| Aug 25, 2020 | CVE Modified | [email protected] |
| Aug 20, 2020 | Reanalysis | [email protected] |
| Aug 17, 2020 | Initial Analysis | [email protected] |