Cyber ·
USN-8957-1: identity validation flaw in Ubuntu's authd
Ubuntu Security advisory on authd: a failure to validate provider identities linked to local accounts, with possible access to another user's account and files.
According to advisory USN-8957-1, authd did not correctly validate user identities when associating identity provider accounts. An attacker could possibly exploit the flaw to gain access to another user's local account and files, resulting in unauthorized access to sensitive information.
The text reviewed is an automatic translation of the Ubuntu Security feed. Affected versions, packages and fixes should be checked in the original advisory published by Ubuntu Security, which is the authoritative source for the list of impacted systems.