GO-2024-3181

vendorUSosv

PAM module may allow accessing with the credentials of another user in github.com/ubuntu/authd

view advisory published 2024-10-09Licence: per source

PAM module may allow accessing with the credentials of another user in github.com/ubuntu/authd

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-9313US——
Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authe…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan