Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12197

Опубликовано: 17 окт. 2017
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

It was found that libpam4j did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-863

EPSS

Процентиль: 62%
0.00427
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 8 лет назад

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

CVSS3: 6.5
nvd
около 8 лет назад

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

CVSS3: 6.5
debian
около 8 лет назад

It was found that libpam4j up to and including 1.8 did not properly va ...

CVSS3: 6.5
github
больше 3 лет назад

Improper Input Validation in libpam4j

EPSS

Процентиль: 62%
0.00427
Низкий

4.3 Medium

CVSS3