NVD

Id
32944  
Name
CVE-2014-5195  
Description
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-07  
Modified Date
2017-01-06  
Seq
2014-5195  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172969 32944 CVE-2014-5195 68987  View
172970 32944 CVE-2014-5195 USN-2303-1  View
172971 32944 CVE-2014-5195 ubuntu-unity-screenlock-sec-bypass(95199)  View
172972 32944 CVE-2014-5195 https://bugs.launchpad.net/unity/7.2/+bug/1349128  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14831 JVNDB-2014-003706 Ubuntu で使用される Unity におけるロック画面を回避される脆弱性 Ubuntu で使用される Unity は、ロック画面に切り替える際、キーボードフォーカスを適切に取得しないため、ロック画面を回避される脆弱性が存在します。 CVE-2014-5195 72484 CVE-2014-5195 32944 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003706.html 2014-07-31 2014-08-11 View