https://bugs.kde.org/show_bug.cgi?id=383768

            Bug ID: 383768
           Summary: Screen locker password input text field allows access
                    to the copy/paste clipboard buffer
           Product: kscreenlocker
           Version: 5.10.3
          Platform: Debian unstable
                OS: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: NOR
         Component: greeter
          Assignee: plasma-b...@kde.org
          Reporter: k...@m2m.pm
                CC: bhus...@gmail.com, mgraess...@kde.org
  Target Milestone: ---

After locking the screen, it is possible to use the Shift-Insert keyboard
combination to paste the current clipboard content into (at least) the password
input field, which get shown as asterisks, hence revealing the exact length of
the current clipboard contents string at least, eventually worse.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to