CVE-2020-17489

An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)

• CWE-522

• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.htmlThird Party Advisory
• https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997Exploit, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00014.htmlThird Party Advisory
• https://security.gentoo.org/glsa/202009-08Third Party Advisory
• https://usn.ubuntu.com/4464-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.htmlThird Party Advisory
• https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997Exploit, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/09/msg00014.htmlThird Party Advisory
• https://security.gentoo.org/glsa/202009-08Third Party Advisory
• https://usn.ubuntu.com/4464-1/Third Party Advisory

Published

Aug 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17480TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the …6.1
• CVE-2020-17482An issue has been found in PowerDNS Authoritative Server bef…4.3
• CVE-2020-17483An improper access control vulnerability exists in Uffizio's…7.5
• CVE-2020-17484An Open Redirection vulnerability exists in Uffizio's GPS Tr…6.1
• CVE-2020-17485A Remote Code Execution vulnerability exist in Uffizio's GPS…9.8
• CVE-2020-17487radare2 4.5.0 misparses signature information in PE files, c…7.5
• CVE-2020-1749A flaw was found in the Linux kernel's implementation of som…7.5
• CVE-2020-17490The TLS module within SaltStack Salt through 3002 creates ce…5.5
• CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.5.3
• CVE-2020-17495django-celery-results through 1.2.1 stores task results in t…7.5
• CVE-2020-17496vBulletin 5.5.4 through 5.6.2 allows remote command executio…9.8
• CVE-2020-17497eapol.c in iNet wireless daemon (IWD) through 1.8 allows att…8.1