CVE-2020-14391

MEDIUM

Gnome Control Center - Insufficiently Protected Credentials

Title source: rule

Description

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface. This flaw allows a local attacker to discover the Red Hat Customer Portal password. The highest threat from this vulnerability is to confidentiality.

References (1)

[Issue Tracking, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=1873093

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 37.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-522

Status published

Affected Products (1)

gnome/control_center

Timeline

Published Feb 08, 2021

Tracked Since Feb 18, 2026