CVE-2018-20681
Medium
Description
mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices (such as additionally attached graphical outputs via HDMI, VGA, DVI, etc.) the content of a screensaver-locked session can be revealed. In some scenarios, the attacker can execute applications, such as by clicking with a mouse.
SeverityMedium
CVSS6.1
Exploit probability—
ProductMate-desktop Mate-screensaver
PublishedJan 9, 2019
First seenJan 9, 2019
How to fix
Update
- mate-desktop mate-screensaver1.20.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mate-desktop mate-screensaver | v < 1.20.2 | 1.20.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.