Security features bypass in gnome-control-center - CVE-2022-1736
Published: May 18, 2022 / Updated: May 27, 2022
Vulnerability identifier: #VU63410
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-1736
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to bypass implemented security restrictions.
The vulnerability exists due to GNOME Settings incorrectly handles the remote
desktop sharing configuration. When turning off desktop sharing, it will be turned on again after reboot.
Affected software
gnome-control-center
Ubuntu
gnome-control-center (Ubuntu package)
Ubuntu
gnome-control-center (Ubuntu package)
How to mitigate CVE-2022-1736
Install update from vendor's website.
gnome-control-center - update to 42.2
gnome-control-center (Ubuntu package) - update to 1:41.4-1ubuntu13.2
gnome-control-center (Ubuntu package) - update to 1:41.4-1ubuntu13.2