https://bugs.kde.org/show_bug.cgi?id=503596
Bug ID: 503596
Summary: Locked SDDM can be opened with a user password copied
to Clipboard with Ctrl+V.
Classification: Plasma
Product: plasma-login
Version: unspecified
Platform: Arch Linux
OS: Linux
Status: REPORTED
Severity: critical
Priority: NOR
Component: general
Assignee: plasma-b...@kde.org
Reporter: aquamagis...@proton.me
CC: k...@davidedmundson.co.uk, olib...@outlook.com
Target Milestone: ---
SUMMARY
Locked SDDM can be opened with a user password copied to Clipboard with Ctrl+V.
STEPS TO REPRODUCE
1. Open any text editor (Kate).
2. Write your login password that you use for SDDM login screen.
3. Mark and copy the password to Clipboard with Ctrl+C.
4. Lock your session.
5. Press Ctrl+V and you are back in your current user account.
OBSERVED RESULT
Clipboard is leaking a user password to SDDM.
EXPECTED RESULT
Clipboard should not work on locked SDDM.
SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 6.3.4
KDE Frameworks Version: 6.13.0
Qt Version: 6.9.0
Kernel Version: 6.14.4-arch1-2 (64-bit)
Graphics Platform: Wayland
Processors: 32 × AMD Ryzen 9 9950X3D 16-Core Processor
Memory: 67.0 GB of RAM
Graphics Processor: AMD Radeon Graphics (AMD RX 9070/9070 XT [Discrete])
ADDITIONAL INFORMATION
N/A
--
You are receiving this mail because:
You are watching all bug changes.
