VULNERABILITY INTELLIGENCE
CVE-2007-4569
CVSS score6.8 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2007-09-21
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C
Description
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.