Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-2532

Date: September 3, 2010

lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments.

Severity Score

Related Resources (8)

http://www.openwall.com/lists/oss-security/2010/07/15/1
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
https://bugzilla.novell.com/show_bug.cgi?id=622083
https://bugzilla.redhat.com/show_bug.cgi?id=614608
https://nvd.nist.gov/vuln/detail/CVE-2010-2532
https://bugzillafiles.novell.org/attachment.cgi?id=375737
http://www.openwall.com/lists/oss-security/2010/07/16/4
https://www.mend.io/vulnerability-database/CVE-2010-2532

Severity Score

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us