Date and Time Indicator vulnerability

2014-04-3000:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.10

Packages

indicator-datetime - Simple clock

Details

It was discovered that the Date and Time Indicator incorrectly allowed
Evolution to be opened at the greeter screen. An attacker could use this
issue to possibly gain unexpected access to applications such as a web
browser with privileges of the greeter user.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchindicator-datetime< 13.10.0+13.10.20131023.2-0ubuntu1.1UNKNOWN
Ubuntu13.10noarchgnome-control-center-datetime< 13.10.0+13.10.20131023.2-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	indicator-datetime	< 13.10.0+13.10.20131023.2-0ubuntu1.1	UNKNOWN
Ubuntu	13.10	noarch	gnome-control-center-datetime	< 13.10.0+13.10.20131023.2-0ubuntu1.1	UNKNOWN