CVE-2019-3825

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

Score

CVSS 3.0 6.4 Medium

Status

Modified - secalert@redhat.com

Published

2019-02-06

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Ubuntu Linux (Canonical)
• Gnome Display Manager (Gnome)
• Enterprise Linux (Redhat)
• Gdm (The Gnome Projectr)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825
• https://usn.ubuntu.com/3892-1/