CVE-2024-5148

Name of the Vulnerable Software and Affected Versions: gnome-remote-desktop (affected versions not specified)

Description: A flaw was found in the gnome-remote-desktop package, where the gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. This allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition, potentially exposing the system RDP TLS certificate and key to unauthorized users.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.