VULNERABILITY INTELLIGENCE

CVE-2013-4509

CVSS score1.9 NONE
EPSS probability0.34%
CISA KEVNot currently listed
Published2013-11-23
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N

Description

The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.

Weakness classification

  • nvd@nist.gov: CWE-255

Primary references