USN-8829-1: Plasma Workspace vulnerability
Ubuntu warns a Plasma Workspace flaw may let a local attacker run code as another user.
USN-8829-1 covers a Plasma Workspace vulnerability discovered by Fabian Vogt. The session manager did not properly authenticate local clients connecting to it. A local attacker could potentially execute arbitrary code as another user. The notice names no CVE and does not report exploitation in the wild.
- Session manager did not properly authenticate local clients
- A local attacker could run arbitrary code as another user
- Fabian Vogt reported the flaw; no CVE is listed
- Products
- Plasma Workspace
From the original article
Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.