Bypass Vulnerability in GDM Lock Screen Affects Ubuntu
CVE-2019-3825

6.3MEDIUM

Key Information:

Status
Vendor
CVE Published:
6 February 2019

Summary

A vulnerability in GDM prior to version 3.31.4 allows attackers to bypass the lock screen feature when timed login is enabled. By selecting the timed login user and waiting for the timer to expire, an attacker can gain unauthorized access to an active user's session. This flaw poses a significant risk for users who rely on timed logins for security.

Affected Version(s)

gdm 3.31.4

References

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-3825 : Bypass Vulnerability in GDM Lock Screen Affects Ubuntu | SecurityVulnerability.io