Screen Lock Bypass in MATE Desktop Environment's Screensaver

CVE-2018-20681

What is CVE-2018-20681?

The mate-screensaver in the MATE Desktop Environment prior to version 1.20.2 is susceptible to an exploit that enables unauthorized individuals to bypass screen locking protections. By physically tampering with external output devices such as HDMI or VGA connections, an attacker may uncover the screen content of a locked session. In certain situations, this vulnerability also permits the attacker to interact with applications on the locked screen, potentially leading to unauthorized control and manipulation of sensitive information.

References