Описание
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Ссылки
- PatchVendor Advisory
 - Vendor Advisory
 - PatchVendor Advisory
 - Vendor Advisory
 
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:pam:pam:0.76:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.00717
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
около 23 лет назад
PAM 0.76 treats a disabled password as if it were an empty (null) pass ...
github
больше 3 лет назад
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
EPSS
Процентиль: 72%
0.00717
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other