CVE-2014-5195
Last modified
CVE-2014-5195 is a vulnerability of currently unknown severity. Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ayatana Project | Unity | <= 7.2.2 |
| Ayatana Project | Unity | 7.2.0 |
| Ayatana Project | Unity | 7.2.1 |
| Ayatana Project | Unity | 7.3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-5195?
How severe is CVE-2014-5195?
How do I fix CVE-2014-5195?
Are you affected by CVE-2014-5195?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
