The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-04-29 07:38
Updated : 2014-04-29 12:03
NVD link : CVE-2013-7221
Mitre link : CVE-2013-7221
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
gnome
- gnome-shell