CVE-2015-1319

high

Description

The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.

References

https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870

http://www.ubuntu.com/usn/USN-2741-1

Details

Source: Mitre, NVD

Published: 2015-09-17

Updated: 2019-02-04

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High