CVE

Id
72492  
CVE No.
CVE-2014-5195  
Status
Candidate  
Description
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.  
Phase
Assigned (20140807)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684638 72492 CVE-2014-5195 CONFIRM:https://bugs.launchpad.net/unity/7.2/+bug/1349128  View
684639 72492 CVE-2014-5195 UBUNTU:USN-2303-1  View
684640 72492 CVE-2014-5195 URL:http://www.ubuntu.com/usn/USN-2303-1  View
684641 72492 CVE-2014-5195 BID:68987  View
684642 72492 CVE-2014-5195 URL:http://www.securityfocus.com/bid/68987  View
684643 72492 CVE-2014-5195 OSVDB:109788  View
684644 72492 CVE-2014-5195 URL:http://www.osvdb.org/109788  View
684645 72492 CVE-2014-5195 XF:ubuntu-unity-screenlock-sec-bypass(95199)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14970 JVNDB-2014-003845 WordPress のウイジェットの実装の wp-includes/class-wp-customize-widgets.php における任意のコードを実行される脆弱性 WordPress のウイジェットの実装の wp-includes/class-wp-customize-widgets.php には、任意のコードを実行される脆弱性が存在します。 CVE-2014-5203 72492 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003845.html  View