GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
BID:63659
Info
GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
| Bugtraq ID: | 63659 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 28 2013 12:00AM |
| Updated: | Apr 13 2015 10:14PM |
| Credit: | Torsten Scholak |
| Vulnerable: |
GNOME gnome-shell 3.10 |
| Not Vulnerable: | |
Discussion
GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
gnome-shell is prone to a local security-bypass vulnerability.
An attacker with physical access to the desktop may be able to bypass the desktop-locking screen that may aid in further attacks.
GNOME gnome-shell 3.10 is vulnerable.
gnome-shell is prone to a local security-bypass vulnerability.
An attacker with physical access to the desktop may be able to bypass the desktop-locking screen that may aid in further attacks.
GNOME gnome-shell 3.10 is vulnerable.
Exploit / POC
GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
To exploit this issue, attackers require physical access.
To exploit this issue, attackers require physical access.
Solution / Fix
GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GNOME gnome-shell Lock Screen Local Security Bypass Vulnerability
References:
References:
- Bug 1013721 - GNOME 3.10 lock screen does not require password to unlock (Red Hat)
- Bug 708997 - sssd: lock screen unlocks without a password (Torsten Scholak)
- GNOME Homepage (GNOME)