CVE-2017-12164CWE-592

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin

Medium · published July 26, 2018

CVSS v3.0
4.1
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.

The record
Technical detail
CVSS v3.0
4.1 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.4th percentile
Weakness
CWE-592 · DEPRECATED: Authentication Bypass Issues
Published
2018-07-26T16:00Z
EPSS history
Timeline
  • 26 JUL 16:00Z
    A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin
    cvelistv5