6.8

CVE-2007-4569

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
KdeKde Version3.3
KdeKde Version3.3.0
KdeKde Version3.3.1
KdeKde Version3.3.2
KdeKde Version3.4
KdeKde Version3.4.0
KdeKde Version3.4.1
KdeKde Version3.4.2
KdeKde Version3.4.3
KdeKde Version3.5
KdeKde Version3.5.0
KdeKde Version3.5.1
KdeKde Version3.5.2
KdeKde Version3.5.3
KdeKde Version3.5.4
KdeKde Version3.5.5
KdeKde Version3.5.6
KdeKde Version3.5.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.2% 0.388
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C