CVE-2020-14391

MEDIUM

5.5

CVSS Score

Published: February 8, 2021 at 10:12 PM UTC

Updated: June 17, 2026 at 02:54 AM UTC

5 products affected across 2 vendorsControl CenterEnterprise LinuxEnterprise Linux Eus

Using gnome-settings-daemon by N/A?

Get instant alerts when new vulnerabilities affect gnome-settings-daemon - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface. This flaw allows a local attacker to discover the Red Hat Customer Portal password. The highest threat from this vulnerability is to confidentiality.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Control Center · Gnome

95%

v < 8.2

Affected range stops below 8.2, so it looks safe — our inference, not a vendor statement

redhat-enterprise-linux (environment) · redhat-enterprise-linux-aus (environment) · redhat-enterprise-linux-eus (environment) · redhat-enterprise-linux-tus (environment)

Enterprise Linux · Red Hatrpmdevice

80%

All versions

Enterprise Linux Aus · Red Hatrpmdevice

80%

All versions

Enterprise Linux Eus · Red Hatrpmdevice

80%

All versions

Enterprise Linux Tus · Red Hatdevice

80%

All versions