CVE-2024-5148
Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
概要
Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and key can be exposed to unauthorized users. This flaw allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition.
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- report gitlab.gnome.org
- web access.redhat.com