Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfhm-wwqj-c296

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

EPSS

Процентиль: 24%
0.00075
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 6.3
ubuntu
больше 6 лет назад

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

CVSS3: 6.3
redhat
больше 6 лет назад

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

CVSS3: 6.3
nvd
больше 6 лет назад

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

CVSS3: 6.3
debian
больше 6 лет назад

A vulnerability was discovered in gdm before 3.31.4. When timed login ...

suse-cvrf
около 6 лет назад

Security update for gdm

EPSS

Процентиль: 24%
0.00075
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-287