NVD

Id
40106  
Name
CVE-2013-4509  
Description
The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-11-23  
Modified Date
2014-01-23  
Seq
2013-4509  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204050 40106 CVE-2013-4509 openSUSE-SU-2013:1686  View
204051 40106 CVE-2013-4509 openSUSE-SU-2013:1825  View
204052 40106 CVE-2013-4509 openSUSE-SU-2014:0068  View
204053 40106 CVE-2013-4509 https://bugzilla.redhat.com/show_bug.cgi?id=1027028  View
204054 40106 CVE-2013-4509 https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690  View
204055 40106 CVE-2013-4509 https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7  View
204056 40106 CVE-2013-4509 https://groups.google.com/forum/#!topic/ibus-user/mvCHDO1BJUw  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23681 JVNDB-2013-005256 IBUS のデフォルト設定におけるユーザパスワードを取得される脆弱性 IBUS のデフォルト設定は、IBus.InputPurpose.PASSWORD が設定されていない、および GNOME 3 で使用される場合、入力されたパスワード文字を隠さないため、ユーザパスワードを取得される脆弱性が存在します。 CVE-2013-4509 64451 CVE-2013-4509 40106 1.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005256.html 2013-08-29 2014-01-09 View