| Package | Affected versions | Patched versions |
|---|---|---|
| slim simple login manager | = 1.3.0 |
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free