AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-5148

HIGH · CVSS 7.5 EPSS 0.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-09-02 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It may be remotely exploitable.

CVE
CVE-2024-5148
Severity
HIGH
CVSS
7.5
EPSS
0.57%

Original NVD Description

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and key can be exposed to unauthorized users. This flaw allows a malicious user on the system to take control of the RDP client connection during the login screen-to-user session transition.