CVE-2012-6140

2013-04-2410:00:00

redhat

www.cve.org

6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.8%

JSON

pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.