CVE-2023-50977 - Vulnerability Details - OpenCVE

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability. See also CVE-2024-36472.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/7666
https://nvd.nist.gov/vuln/detail/CVE-2023-50977
https://www.cve.org/CVERecord?id=CVE-2023-50977

History

No history.

MITRE

Status: REJECTED

Assigner: mitre

Published:

Updated: 2025-02-13T15:46:58.231Z

Reserved: 2023-12-17T00:00:00.000Z

Link: CVE-2023-50977

Vulnrichment

Updated:

NVD

Status : Rejected

Published: 2024-05-27T14:15:09.380

Modified: 2024-05-28T17:15:09.007

Link: CVE-2023-50977

Redhat

Severity : Moderate

Publid Date: 2024-05-27T00:00:00Z

Links: CVE-2023-50977 - Bugzilla

{"bugzilla": {"description": "gnome-shell: Shell Captive Portal Hijack", "id": "2283545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283545"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-20", "details": ["A flaw was found In gnome-shell. The GNOME Network Manager and GNOME Shell Portal Helper connectivity checks send DNS checks that, if intercepted, may be used to launch a GNOME Captive Portal in a WebKitGTK browser and load arbitrary HTML and Javascript code."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2023-50977", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Will not fix", "package_name": "gnome-shell", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "gnome-shell", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "gnome-shell", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "gnome-shell", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-50977\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-50977\nhttps://gitlab.gnome.org/GNOME/gnome-shell/-/issues/7666"], "statement": "This vulnerability is classified as moderate severity rather than high because it requires a specific and controlled environment to be exploited effectively. The attacker needs to perform DNS hijacking within the same local network, which limits the scope of potential targets. Additionally, the exploit depends on the GNOME Captive Portal automatically opening a WebKitGTK browser, which, while a default behavior, may not be universally applicable across all GNOME configurations. Furthermore, modern web browsers use sandboxing as a mechanism to contain malicious activity, significantly reducing the potential impact of the exploit. This sandboxing mitigates the risk of the attack affecting other parts of the system, thus lowering the severity of this flaw to moderate. The exploitation vector, while technically feasible, involves multiple steps that reduce the likelihood of widespread, automated attacks. Thus, the impact, while serious, is confined to scenarios with network control and specific GNOME settings, justifying its moderate severity classification.", "threat_severity": "Moderate"}