[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffOHVpdouyRYc3VAYP3QHlXeKax8nUyYtyYEwrXxABfs":3,"g5a-risk:CVE-2021-20315":118},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":62,"weaknesses":63,"weaknessesCount":62,"isActivelyExploited":72,"cisaInfo":27,"otxData":27,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":114,"notableEvents":115},"CVE-2021-20315","What is CVE-2021-20315?","A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GN...","2022-02-18T18:15:08.8","2022-12-03T01:42:03.343",6.1,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,0.9,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","LOCAL","PARTIAL",3.6,3.9,4.9,0.00204,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"gnome","gnome-shell","*","cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"centos","stream","8","cpe:2.3:o:centos:stream:8:*:*:*:*:*:*:*",2,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2006285","Red Hat",[60,61],"Issue Tracking","Third Party Advisory",1,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-667","Improper Locking","The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.","Locking is a type of synchronization behavior that ensures that multiple independently-operating processes or threads do not interfere with each other when accessing the same resource. All processes\u002Fthreads are expected to follow the same steps for locking. If these steps are not followed precisely - or if no locking is done at all - then another process\u002Fthread could modify the shared resource in a way that is not visible or predictable to the original process.  This can lead to data or memory corruption, denial of service, etc.","Draft","Class","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2021-20315? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-20315, a medium severity cyber security vulnerability from 2022. A locking protection bypass flaw was found in some versio...","CVE-2021-20315, CVE-2021-20315 vulnerability, CVE-2021-20315 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, gnome security, centos security, gnome-shell vulnerability, stream vulnerability","\u002Fwhat-is\u002Fcve-2021-20315",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-20315","Cybersecurity","CVE-2021-20315, CVE-2021-20315 vulnerability, CVE-2021-20315 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100,108],{"Operator":27,"Negate":27,"Nodes":101},[102],{"Operator":103,"Negate":27,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":107,"VersionEndIncluding":27},"846C7D79-30CC-48F6-9970-5671C658D42A","3.32.2",{"Operator":27,"Negate":27,"Nodes":109},[110],{"Operator":103,"Negate":27,"CPEMatch":111},[112],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CF40AED3-057A-48B0-95D2-8584EA2F13AD",[],[],{"lastModified":11,"cacheTime":117,"version":33},1792269624366,{"score":119,"band":120,"action":121,"scoredAt":122},20,"Low","Monitor","2026-10-16T06:53:34.949797+00:00"]