CVE-2019-3825: Medium severity Gnome GNOME Display Manager vulnerability
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-3825?
CVE-2019-3825 is a vulnerability in gdm before version 3.31.4 which allows an attacker to bypass the lock screen by exploiting timed login.
How severe is CVE-2019-3825?
CVE-2019-3825 is rated as medium severity with a CVSS score of 6.4.
Which software versions are affected by CVE-2019-3825?
The affected software versions include gdm3 3.30.2-3, 3.38.2.1-1, 43.0-3, 45.0.1-1, and some versions of gdm3 for Ubuntu.
How can I fix CVE-2019-3825?
To fix CVE-2019-3825, update gdm3 to version 3.31.4 or higher.
Where can I find more information about CVE-2019-3825?
You can find more information about CVE-2019-3825 in the references provided: [Link 1](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825), [Link 2](https://usn.ubuntu.com/3892-1/), [Link 3](https://launchpad.net/bugs/cve/CVE-2019-3825).