CVE-2015-8308

LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.

Score

CVSS 3.0 7.8 High

Status

Modified - secalert@redhat.com

Published

2017-08-24

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Lxdm (Lxdm Project)

References

• http://www.openwall.com/lists/oss-security/2015/11/20/6
• https://bugzilla.redhat.com/show_bug.cgi?id=1284460