Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another users ID and gain their privileges.
The product does not properly manage a user within its environment.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Authd | Canonical | * | 0.3.6 (excluding) |