The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-04-29 14:38
Updated : 2014-04-29 19:03
NVD link : CVE-2013-7221
Mitre link : CVE-2013-7221
CVE.ORG link : CVE-2013-7221
JSON object : View
Products Affected
gnome
- gnome-shell
CWE
CWE-264
Permissions, Privileges, and Access Controls