Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SDDM 安全漏洞
Vulnerability Description
SDDM是一款基于QML的X11显示管理器。 SDDM 0.17.0及之前版本中存在安全漏洞，该漏洞源于在将ReuseSession配置为true时程序未能检验现存会话用户的密码。攻击者可通过访问D-Bus系统利用该漏洞解锁任意图形会话。
CVSS Information
N/A
Vulnerability Type
N/A