CVE-2014-5195

published 2014-08-07

CVE-2014-5195: Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows…

Priority P4 27 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ayatana_project	unity	<= 7.2.2	—
ayatana_project	unity	—	—
ayatana_project	unity	—	—
ayatana_project	unity	—	—
dell	unity	>= 0 < 7.2.2+14.04.20140714-0ubuntu1.1	7.2.2+14.04.20140714-0ubuntu1.1

CVSS provenance

nvd v2.0 7.2 HIGH AV:L/AC:L/Au:N/C:C/I:C/A:C

osv 7.2 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-362