2018-07-26 16:00:00
redhat
PUBLISHED
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select login as another user to unlock their screen.