CVE-2020-27837

2020-12-2818:34:04

CWE-362

redhat

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

JSON

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

CNA Affected

[
  {
    "product": "gdm",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 3.38.2.1"
      }
    ]
  }
]