Security Advisory

CVE-2022-40297

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-08 23:38:32
Last updated 2024-08-03 12:14:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's password. NOTE: a third party states "The described attack cannot be executed as demonstrated.