*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Mike Salvatore 
(mikesalvatore):

I've come across a problem where I am able to perform several tasks from
the lock screen which should not be possible. This includes:

  - Viewing desktop windows currently running as the logged-in user
  - Launching programs as the logged-in user
  - Closing windows of running programs
  - Enabling/disabling network interfaces and joining networks

I don't believe there's a way to interact with the running programs -
it's only possible to start a program and view its preview thumbnail.

Another note is that I had to press Super+L twice to lock the screen,
which has been mentioned in other recent bugs.

The unfortunate part is that my PC has been running for days and I have
absolutely no idea how I got it into this state. I upgraded it from
18.04 to 18.10 earlier this week. It was a clean 18.04 install from a
few months back. I haven't done anything that I would consider a desktop
customisation.

I've taken some crude hand-held video of the issue.

https://youtu.be/TjH9KUjA6pY

I could not show the entire Thunderbird window as it displayed my email
address. However it's there.

** Affects: gdm3 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Ability to launch/view apps from lock screen
https://bugs.launchpad.net/bugs/1805134
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to