Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user “sddm” without authentication.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7271
Reference (s):
- BID:70767
- URL: http://www.securityfocus.com/bid/70767
- https://bugzilla.redhat.com/show_bug.cgi?id=1149608
- https://github.com/sddm/sddm/pull/279/files
- https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement