gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: canonical
Published: 2020-11-10T04:20:13.785444Z
Updated: 2024-09-17T03:59:24.216Z
Reserved: 2020-07-29T00:00:00
Link: CVE-2020-16125
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-11-10T05:15:11.893
Modified: 2020-11-24T18:12:02.827
Link: CVE-2020-16125
Redhat