Lucene search

K
cveMitreCVE-2015-1308
HistoryJan 26, 2015 - 3:59 p.m.

CVE-2015-1308

2015-01-2615:59:16
CWE-200
mitre
web.nvd.nist.gov
31
cve-2015-1308
kde workspace
plasma-workspace
remote attack
input events
x server
security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

70.8%

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked.

Affected configurations

Nvd
Node
kdeplasma-workspaceRange5.1
Node
kdekde-workspaceRange4.2.0
VendorProductVersionCPE
kdeplasma-workspace*cpe:2.3:a:kde:plasma-workspace:*:*:*:*:*:*:*:*
kdekde-workspace*cpe:2.3:a:kde:kde-workspace:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

70.8%

Related for CVE-2015-1308