Bug Description

I found a bug allowing a user to bypass the new lock screen of Ubuntu 14.04

1 - When the screen is locked just right click multiple times on the indicator bar (for example on the battery indicator), then shortcuts are available.

2 - Press ALT+F2

3 - you can execute the command you whant on behalf of the logged user.

Here is a video demonstrating this bug : http:// www.youtube. com/watch? v=d4UUB0sI5Fc

lsb_release -rd

Description: Ubuntu 14.04 LTS

Release: 14.04

Ubuntu version updated the 04/28/2014

apt-cache policy unity

unity:

Installed: 7.2.0+14. 04.20140416- 0ubuntu1

Candidate: 7.2.0+14. 04.20140416- 0ubuntu1

Version table:

*** 7.2.0+14. 04.20140416- 0ubuntu1 0

500 http:// fr.archive. ubuntu. com/ubuntu/ trusty/main amd64 Packages

100 /var/lib/ dpkg/status