*** This bug is a security vulnerability ***

Public security bug reported:

When I lock the screen I found that switching to console and then using 
ctrl+alt+F7 to switch back to GUI bypasses the lock screen without typing any 
password. even when I click on switch user after locking the screen if 
replicate the same process it takes me to the locked user account without 
prompting for password.
 
ubuntu 15.10.
unity desktop.

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: lightdm 1.16.7-0ubuntu1
ProcVersionSignature: Ubuntu 4.2.0-27.32-generic 4.2.8-ckt1
Uname: Linux 4.2.0-27-generic x86_64
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
CurrentDesktop: Unity
Date: Thu Mar  3 07:19:08 2016
InstallationDate: Installed on 2015-11-09 (114 days ago)
InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
SourcePackage: lightdm
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: lightdm (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug wily

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1552537

Title:
  Lock screen bypassed by switching to console and then back to GUI

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1552537/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to