CVE-2010-2532
- State
- Published
- Severity
- Not scored
- Published
- Sep 3, 2010
- Updated
- Sep 17, 2024
- Reserved
- Jun 30, 2010
Description
lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20100715 CVE request: lxsession-logoutmailing-list
- SUSE-SR:2010:014vendor-advisory
- [oss-security] 20100715 Re: CVE request: lxsession-logoutmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=614608
- https://bugzilla.novell.com/show_bug.cgi?id=622083
- https://bugzillafiles.novell.org/attachment.cgi?id=375737
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.