WID-SEC-W-2026-0141

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

OpenSC (pam_pkcs11): Schwachstelle ermöglicht Umgehen von Authentifizierung

view advisory published 2026-01-18

Ein lokaler Angreifer kann eine Schwachstelle in OpenSC (pam_pkcs11) ausnutzen, um die Authentifizierung zu umgehen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-24531US——
In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as an error triggered by a smartcard before login), allowing aut…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan