VDB
CVE-2013-4509
CVE-2013-4509
PUBLISHED
CVSS 1.899999976158142 LOW
The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
EPSS 0.08% · 23.5th percentile
Risk Scores
CVSS 2.0
1.899999976158142
EPSS Score
0.08%
23.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ibus_project | ibus | 1.5.4, 0 |
| opensuse | opensuse | 13.1 |
| n/a | n/a | n/a |
Timeline
- Nov 23, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 14, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
References
- https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7 url
- openSUSE-SU-2013:1686 vendor-advisory
- openSUSE-SU-2014:0068 vendor-advisory
- https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690 url
- https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw url
- https://bugzilla.redhat.com/show_bug.cgi?id=1027028 url
- openSUSE-SU-2013:1825 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-4509 advisory
- https://groups.google.com/forum/#!topic/ibus-user/mvCHDO1BJUw url