Registering fingerprints as authentication is allowed without authorization
Gnome control center allows registration of fingerprint as authentication method for the current user, without needing the user to authenticate. This is a security issue.
Needed for testing:
- Installed fingerprint reader
Steps to reproduce:
- Open GNOME Settings
- Go to user account settings
- Register (or remove) fingerprint authentication for the currently logged in user
Control-Center version: 3.32.1
Edited by Ghost User