An issue exists AccountService 0.6.37 in the userchangepasswordauthorizedcb() function in user.c which could let a local users obtain encrypted passwords.
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.35-0ubuntu7.3+esm3" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.35-0ubuntu7.3+esm3" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.35-0ubuntu7.3+esm3" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.35-0ubuntu7.3+esm3" }, { "binary_name": "libpam-pin", "binary_version": "0.6.35-0ubuntu7.3+esm3" } ] }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.40-2ubuntu11.6+esm1" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.40-2ubuntu11.6+esm1" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.40-2ubuntu11.6+esm1" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.40-2ubuntu11.6+esm1" } ] }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.45-1ubuntu1.3+esm1" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.45-1ubuntu1.3+esm1" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.45-1ubuntu1.3+esm1" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.45-1ubuntu1.3+esm1" } ] }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.55-0ubuntu12~20.04.7" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.55-0ubuntu12~20.04.7" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.55-0ubuntu12~20.04.7" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.55-0ubuntu12~20.04.7" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "22.07.5-2ubuntu1.5" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "22.07.5-2ubuntu1.5" }, { "binary_name": "libaccountsservice-dev", "binary_version": "22.07.5-2ubuntu1.5" }, { "binary_name": "libaccountsservice0", "binary_version": "22.07.5-2ubuntu1.5" } ], "availability": "No subscription required" }