Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3203

Опубликовано: 06 мая 2014
Источник: nvd
CVSS2: 4.4
EPSS Низкий

Описание

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*
Версия до 7.2.0 (включая)
cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 22%
0.00071
Низкий

4.4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
почти 12 лет назад

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.

github
больше 3 лет назад

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.

EPSS

Процентиль: 22%
0.00071
Низкий

4.4 Medium

CVSS2

Дефекты

CWE-264