CVE-2010-2532 Security feature bypass in n/a
Attackers with physical access can bypass screen locking when suspending or hibernating LXDE sessions, potentially accessing unattended laptops.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-2532?
CVE-2010-2532 is a high-severity vulnerability in Opensuse Opensuse, published on 3 Sep 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments.
Weakness: CWE-264
Which versions are affected by CVE-2010-2532?
It affects 1 product.
Products include Opensuse Opensuse.
How do I fix CVE-2010-2532?
Apply the vendor's patch.
Is CVE-2010-2532 being exploited?
There is no known exploitation of CVE-2010-2532 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2010-2532, GHSA-4vhr-v6w9-xrq4.