plasma-login-manager vulnerabilities
1 known vulnerability in plasma-login-manager from KDE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score
Latest first
- 7.0 High severity
plasma-login-manager: Execution with Unnecessary Privileges
The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.