High severity7.5NVD Advisory· Published Sep 2, 2024· Updated Apr 15, 2026

CVE-2024-5148

Description

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and key can be exposed to unauthorized users. This flaw allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNOME Foundation/Gnome Desktopllm-fuzzy
osv-coords
pkg:rpm/opensuse/gnome-remote-desktop&distro=openSUSE%20Tumbleweed
Range: < 46.2-1.1

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2024-5148nvd
bugzilla.redhat.com/show_bug.cginvd
gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/196nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000