{"id":"CVE-2020-17489","details":"An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)","modified":"2026-07-08T05:55:47.741276644Z","published":"2020-08-11T21:15:10.837Z","related":["ALSA-2022:1814","SUSE-SU-2020:3132-1","openSUSE-SU-2020:1861-1","openSUSE-SU-2024:10797-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"20.04"},{"last_affected":"20.04"}]},{"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]},{"source":"CPE_STRING","vendor_product":"opensuse:leap","cpes":["cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.2"},{"last_affected":"15.2"}]}]},"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202009-08"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4464-1/"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gnome/gnome-shell","events":[{"introduced":"0"},{"last_affected":"7dce43397816c6448ab1f8dcb361c2dc6b8b7104"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.36.4"}],"source":"CPE_RANGE"}}],"versions":["3.36.4","3.36.3","3.36.2","3.36.1","3.36.0","3.35.92","3.35.91","3.35.3","3.35.2","3.35.1","3.34.1","3.34.0","3.33.92","3.33.91","3.33.90","3.33.4","3.33.3","3.33.2","3.33.1","3.32.1","3.31.92","3.31.91","3.31.90","3.31.4","3.31.2","3.30.1","3.30.0","3.29.92","3.29.91","3.29.90","3.29.4","3.29.3","3.29.2","3.29.1","3.28.1","3.28.0","3.27.92","3.27.91","3.27.1","3.26.1","3.26.0","3.25.91","3.25.90","3.25.4","3.25.3","3.25.2","3.25.1","3.24.0","3.23.92","3.23.91","3.23.90","3.23.3","3.23.2","3.23.1","3.22.1","3.22.0","3.21.92","3.21.91","3.21.90.1","3.21.90","3.21.4","3.21.3","3.21.2","3.21.1","3.20.1","3.20.0","3.19.92","3.19.91","3.19.90","3.19.4","3.19.3","3.19.2","3.19.1","3.18.1","3.18.0","3.17.92","3.17.91","3.17.90","3.17.4","3.17.3","3.17.2","3.17.1","3.16.1","3.16.0","3.15.92","3.15.91","3.15.90","3.15.4","3.15.3","3.15.2","3.15.1","3.14.1","3.14.0","3.13.92","3.13.91","3.13.90","3.13.4","3.13.3","3.13.2","3.13.1","3.12.0","3.11.92","3.11.91","3.11.90","3.11.5","3.11.3","3.11.2","3.11.1","3.10.1","3.10.0.1","3.10.0","3.9.92","3.9.91","3.9.90","3.9.5","3.9.4","3.9.3","3.9.2","3.9.1","3.8.1","3.8.0.1","3.8.0","3.7.92","3.7.91","3.7.90","3.7.5","3.7.4.1","3.7.4","3.7.3","3.7.2","3.7.1","3.6.1","3.6.0","3.5.92","3.5.91","3.5.90","3.5.5","3.5.4","3.5.3","3.5.2","3.4.1","3.4.0","3.3.92","3.3.90","3.3.5","3.3.4","3.3.3","3.3.2","3.2.1","3.2.0","3.1.92","3.1.91.1","3.1.91","3.1.90.1","3.1.90","3.1.4","3.1.3","3.0.1","3.0.0.2","3.0.0.1","3.0.0","2.91.93","2.91.92","2.91.91","2.91.90","2.91.6","2.91.5","2.91.4","2.91.3","2.91.2","2.91.1","2.91.0","2.31.5","2.31.4","2.31.2","2.29.1","2.29.0","2.28.0","2.27.3","2.27.2","2.27.1","2.27.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-17489.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/gnome-shell","events":[{"introduced":"0"},{"last_affected":"7dce43397816c6448ab1f8dcb361c2dc6b8b7104"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:gnome-shell:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.36.4"}],"source":"CPE_RANGE"}}],"versions":["3.36.4","3.36.3","3.36.2","3.36.1","3.36.0","3.35.92","3.35.91","3.35.3","3.35.2","3.35.1","3.34.1","3.34.0","3.33.92","3.33.91","3.33.90","3.33.4","3.33.3","3.33.2","3.33.1","3.32.1","3.31.92","3.31.91","3.31.90","3.31.4","3.31.2","3.30.1","3.30.0","3.29.92","3.29.91","3.29.90","3.29.4","3.29.3","3.29.2","3.29.1","3.28.1","3.28.0","3.27.92","3.27.91","3.27.1","3.26.1","3.26.0","3.25.91","3.25.90","3.25.4","3.25.3","3.25.2","3.25.1","3.24.0","3.23.92","3.23.91","3.23.90","3.23.3","3.23.2","3.23.1","3.22.1","3.22.0","3.21.92","3.21.91","3.21.90.1","3.21.90","3.21.4","3.21.3","3.21.2","3.21.1","3.20.1","3.20.0","3.19.92","3.19.91","3.19.90","3.19.4","3.19.3","3.19.2","3.19.1","3.18.1","3.18.0","3.17.92","3.17.91","3.17.90","3.17.4","3.17.3","3.17.2","3.17.1","3.16.1","3.16.0","3.15.92","3.15.91","3.15.90","3.15.4","3.15.3","3.15.2","3.15.1","3.14.1","3.14.0","3.13.92","3.13.91","3.13.90","3.13.4","3.13.3","3.13.2","3.13.1","3.12.0","3.11.92","3.11.91","3.11.90","3.11.5","3.11.3","3.11.2","3.11.1","3.10.1","3.10.0.1","3.10.0","3.9.92","3.9.91","3.9.90","3.9.5","3.9.4","3.9.3","3.9.2","3.9.1","3.8.1","3.8.0.1","3.8.0","3.7.92","3.7.91","3.7.90","3.7.5","3.7.4.1","3.7.4","3.7.3","3.7.2","3.7.1","3.6.1","3.6.0","3.5.92","3.5.91","3.5.90","3.5.5","3.5.4","3.5.3","3.5.2","3.4.1","3.4.0","3.3.92","3.3.90","3.3.5","3.3.4","3.3.3","3.3.2","3.2.1","3.2.0","3.1.92","3.1.91.1","3.1.91","3.1.90.1","3.1.90","3.1.4","3.1.3","3.0.1","3.0.0.2","3.0.0.1","3.0.0","2.91.93","2.91.92","2.91.91","2.91.90","2.91.6","2.91.5","2.91.4","2.91.3","2.91.2","2.91.1","2.91.0","2.31.5","2.31.4","2.31.2","2.29.1","2.29.0","2.28.0","2.27.3","2.27.2","2.27.1","2.27.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-17489.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}]}