Bypass Vulnerability in GDM Lock Screen Affects Ubuntu
CVE-2019-3825

6.3MEDIUM

Key Information:

Vendor

The Gnome Projectr

Status
Gdm
Vendor
CVE Published:
6 February 2019

What is CVE-2019-3825?

A vulnerability in GDM prior to version 3.31.4 allows attackers to bypass the lock screen feature when timed login is enabled. By selecting the timed login user and waiting for the timer to expire, an attacker can gain unauthorized access to an active user's session. This flaw poses a significant risk for users who rely on timed logins for security.

Affected Version(s)

gdm 3.31.4

References

https://usn.ubuntu.com/3892-1/
vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2019-3825 : Bypass Vulnerability in GDM Lock Screen Affects Ubuntu