Bypass Vulnerability in GDM Lock Screen Affects Ubuntu
CVE-2019-3825

6.3MEDIUM

Key Information:

Vendor

The Gnome Projectr

Status
Gdm
Vendor
CVE Published:
6 February 2019

What is CVE-2019-3825?

A vulnerability in GDM prior to version 3.31.4 allows attackers to bypass the lock screen feature when timed login is enabled. By selecting the timed login user and waiting for the timer to expire, an attacker can gain unauthorized access to an active user's session. This flaw poses a significant risk for users who rely on timed logins for security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

gdm 3.31.4

References

https://usn.ubuntu.com/3892-1/
vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.