Lucene search

K
cvelistRedhatCVELIST:CVE-2020-27780
HistoryDec 17, 2020 - 11:55 p.m.

CVE-2020-27780

2020-12-1723:55:45
CWE-287
redhat
raw.githubusercontent.com
2

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.3%

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn’t exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.3%