CVE-2022-40297

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo

published September 8, 2022

CVSS
—
EPSS
0%
Percentile
39.7
In the wild
Unconfirmed
What it is

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's password. NOTE: a third party states "The described attack cannot be executed as demonstrated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00470 · 39.7th percentile
Published
2022-09-08T23:38Z
EPSS history
Timeline
  • 08 SEP 23:38Z
    UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo
    cvelistv5