Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pgjg-jx8c-q35f

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

EPSS

Процентиль: 62%
0.00436
Низкий

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 5 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 8.1
redhat
больше 5 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
nvd
около 5 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
msrc
около 5 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
debian
около 5 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it ...

EPSS

Процентиль: 62%
0.00436
Низкий

Дефекты

CWE-287