Xorg Server
1 CVEs
product
Monthly
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Opensuse
X Server
Xorg Server
NVD
CVSS 2.0
3.6
EPSS
0.1%
EPSS 0%
CVSS 3.6
LOW
Monitor
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Opensuse
X Server
+1
NVD