{
  "document": {
    "aggregate_severity": {
      "text": "Medium"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2021/cve-2021-20315-els_os-cloudlinux7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-25T04:13:05Z",
      "generator": {
        "date": "2026-10-25T04:13:05Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2021-20315-ELS_OS-CLOUDLINUX7ELS",
      "initial_release_date": "2021-01-01T00:00:00Z",
      "revision_history": [
        {
          "date": "2021-01-01T00:00:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-25T04:13:05Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2021-20315"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CloudLinux 7",
                "product": {
                  "name": "CloudLinux 7",
                  "product_id": "CloudLinux-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "CloudLinux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnome-shell-0:3.28.3-34.el7_9.x86_64",
                "product": {
                  "name": "gnome-shell-0:3.28.3-34.el7_9.x86_64",
                  "product_id": "gnome-shell-0:3.28.3-34.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnome-shell@3.28.3-34.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnome-shell-0:3.28.3-34.el7_9.i686",
                "product": {
                  "name": "gnome-shell-0:3.28.3-34.el7_9.i686",
                  "product_id": "gnome-shell-0:3.28.3-34.el7_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnome-shell@3.28.3-34.el7_9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Cloud Linux Software, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
                "product": {
                  "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
                  "product_id": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnome-shell@3.28.3-34.el7_9.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
                "product": {
                  "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
                  "product_id": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnome-shell@3.28.3-34.el7_9.tuxcare.els1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64"
        },
        "product_reference": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnome-shell-0:3.28.3-34.el7_9.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.x86_64"
        },
        "product_reference": "gnome-shell-0:3.28.3-34.el7_9.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686"
        },
        "product_reference": "gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnome-shell-0:3.28.3-34.el7_9.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.i686"
        },
        "product_reference": "gnome-shell-0:3.28.3-34.el7_9.i686",
        "relates_to_product_reference": "CloudLinux-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-20315",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "description",
          "text": "A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.i686",
          "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
          "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
          "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2021-20315"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2006285",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2006285"
        }
      ],
      "release_date": "2022-02-18T18:15:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-10-15T12:43:31.832392Z",
          "details": "Deprioritize: this flaw is limited to local, physical access on a locked GNOME Shell session and only triggers if the “Application Menu” or “Window List” extensions are enabled in certain CentOS Stream 8 gnome-shell builds—there is no remote vector. In server and cloud VM deployments without a running local GNOME Shell session, the vulnerable code path is absent, so the issue is inapplicable. Even on affected workstations, it does not expose new credentials or data and only allows starting/killing processes as the already-logged‑in user, making it a low-priority, physical-access hardening concern.",
          "product_ids": [
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.i686",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.i686",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.i686",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.tuxcare.els1.x86_64",
            "CloudLinux-7:gnome-shell-0:3.28.3-34.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}