high7.8
CVE-2014-7271
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
Impact
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sddm Project | Sddm | before 0.10.0 |
| Fedoraproject | Fedora | Versions 20, 21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html
- http://www.openwall.com/lists/oss-security/2014/10/06/4
- http://www.securityfocus.com/bid/70767
- https://bugzilla.redhat.com/show_bug.cgi?id=1149608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98421
- https://github.com/sddm/sddm/pull/279/files
- https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html
- http://www.openwall.com/lists/oss-security/2014/10/06/4
- http://www.securityfocus.com/bid/70767
- https://bugzilla.redhat.com/show_bug.cgi?id=1149608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98421
- https://github.com/sddm/sddm/pull/279/files
- https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement