CVE-2024-10041 affecting package pam for versions less than 1.5.1-7

🗓️ 07 Apr 2025 21:13:01Reported by CBL MarinerType

cbl_mariner

cbl_mariner👁 4 Views

CVE-2024-10041 affects pam package versions below 1.5.1-7, patched version available now.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.	5 May 202516:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in PAM affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	28 Mar 202515:53	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Apr 202513:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to PAM, go-git and Golang.org/X/Crypto	27 Feb 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Base OS issues	2 Apr 202517:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2025	28 May 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202515:08	–	ibm
ATTACKERKB	CVE-2024-10041	23 Oct 202414:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : pam, pam-devel (ALAS2023-2025-1132)	4 Aug 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
CBL-Mariner	2.0	all	pam	1.5.1-7	UNKNOWN

07 Apr 2025 21:13Current

7High risk

Vulners AI Score7

CVSS 3.14.7

EPSS0.00265

SSVC

cve 2024 10041 package pam patched version available unix vulnerabilities