Vulnerability in Kde

CVE-2007-4569

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.

Affected products

  • Kde — versions 3.3, 3.3.0, 3.3.1
  • N/a — versions n/a

Weakness classification (CWE)

References