CVE-2023-49344

CVSS V2 None CVSS V3 None
Description
Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.
Overview
  • CVE ID
  • CVE-2023-49344
  • Assigner
  • canonical
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-12-14T21:31:09.613Z
  • Last Modified Date
  • 2023-12-14T21:31:09.613Z
Weakness Enumerations
CWE URL
CWE-377 http://cwe.mitre.org/data/definitions/377.html
CWE-668 http://cwe.mitre.org/data/definitions/668.html
References
Reference URL Reference Tags
https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rhwf-6fc9-9jvm issue-tracking
https://ubuntu.com/security/notices/USN-6556-1 third-party-advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49344 issue-tracking
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-49344
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49344
History
Created Old Value New Value Data Type Notes
2024-06-25 13:00:05 Added to TrackCVE