Password visible after user switch
Bug #1154008 reported by
guyvdb
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| gnome-screensaver (Ubuntu) |
Triaged
|
Undecided
|
Unassigned | ||
Bug Description
When switching from user A to user B, and back to user A, I have to enter user A's password.
This unlocks the screensaver/login window just fine, but it also enters user A's password in plain text into the window that had focus when the switch from user A to user B was made.
For example, when I open a console, switch from A to B and from B to A, and enter the password, the password is also entered into the console window, together with the ENTER keystroke, thereby attempting to execute my password as a command.
Obviously this is a huge security issue.
Description: Ubuntu 12.10
Release: 12.10
| information type: | Private Security → Public Security |
| Changed in gnome-screensaver (Ubuntu): | |
| status: | New → Triaged |
To post a comment you must log in.
