Описание
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1.4-2+deb8u1build0.17.10.1 |
| devel | not-affected | 1.4-3 |
| esm-apps/xenial | released | 1.4-2+deb8u1build0.16.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.4-2+deb8u1build0.14.04.1]] |
| precise/esm | DNE | |
| trusty | released | 1.4-2+deb8u1build0.14.04.1 |
| trusty/esm | DNE | trusty was released [1.4-2+deb8u1build0.14.04.1] |
| upstream | needs-triage | |
| xenial | released | 1.4-2+deb8u1build0.16.04.1 |
| zesty | released | 1.4-2+deb8u1build0.17.04.1 |
Показывать по
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
It was found that libpam4j up to and including 1.8 did not properly va ...
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3