CVE-2024-5148
Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
Résumé
Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and key can be exposed to unauthorized users. This flaw allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition.
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- report gitlab.gnome.org
- web access.redhat.com