Bypass Vulnerability in GDM Lock Screen Affects Ubuntu
CVE-2019-3825
6.3MEDIUM
Summary
A vulnerability in GDM prior to version 3.31.4 allows attackers to bypass the lock screen feature when timed login is enabled. By selecting the timed login user and waiting for the timer to expire, an attacker can gain unauthorized access to an active user's session. This flaw poses a significant risk for users who rely on timed logins for security.
Affected Version(s)
gdm 3.31.4
References
CVSS V3.1
Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved