An issue exists AccountService 0.6.37 in the userchangepasswordauthorizedcb() function in user.c which could let a local users obtain encrypted passwords.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "accountsservice" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "accountsservice-dbgsym" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "gir1.2-accountsservice-1.0" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "libaccountsservice-dev" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "libaccountsservice-doc" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "libaccountsservice0" }, { "binary_version": "0.6.55-0ubuntu12~20.04.7", "binary_name": "libaccountsservice0-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "accountsservice" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "accountsservice-dbgsym" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "gir1.2-accountsservice-1.0" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "libaccountsservice-dev" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "libaccountsservice-doc" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "libaccountsservice0" }, { "binary_version": "22.07.5-2ubuntu1.5", "binary_name": "libaccountsservice0-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "23.13.9-2ubuntu2", "binary_name": "accountsservice" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "accountsservice-dbgsym" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "gir1.2-accountsservice-1.0" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "libaccountsservice-dev" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "libaccountsservice-doc" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "libaccountsservice0" }, { "binary_version": "23.13.9-2ubuntu2", "binary_name": "libaccountsservice0-dbgsym" } ] }