In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
Metrics
Affected Vendors & Products
References
History
Fri, 16 Aug 2024 18:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Redhat
Redhat enterprise Linux |
|
CPEs | cpe:/a:redhat:enterprise_linux:8 | |
Vendors & Products |
Redhat
Redhat enterprise Linux |
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-19T18:48:42.589Z
Reserved:
Link: CVE-2024-36472
Vulnrichment
Updated: 2024-08-02T03:37:05.182Z
NVD
Status : Awaiting Analysis
Published: 2024-05-28T16:15:17.033
Modified: 2024-05-28T17:11:47.007
Link: CVE-2024-36472
Redhat