EUVD-2021-18797

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Yubico pam-u2f before 1.1.1 allows local PIN bypass if configured improperly, needing physical access.

Reporter	Title	Published	Views	Family All 22
AlpineLinux	CVE-2021-31924	25 May 202123:40	–	alpinelinux
ArchLinux	[ASA-202106-16] pam-u2f: authentication bypass	1 Jun 202100:00	–	archlinux
CNNVD	Yubico pam-u2f 授权问题漏洞	25 May 202100:00	–	cnnvd
CVE	CVE-2021-31924	25 May 202123:40	–	cve
Cvelist	CVE-2021-31924	25 May 202123:40	–	cvelist
Debian CVE	CVE-2021-31924	25 May 202123:40	–	debiancve
Fedora	[SECURITY] Fedora 35 Update: pam-u2f-1.2.0-2.fc35	13 Dec 202117:12	–	fedora
Fedora	[SECURITY] Fedora 34 Update: pam-u2f-1.2.0-2.fc34	14 Dec 202100:56	–	fedora
Tenable Nessus	GLSA-202208-11 : Yubico pam-u2f: Local PIN Bypass vulnerability	10 Aug 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-31924	30 Aug 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "7f095521-1217-3060-99dd-e53e3986f2bc",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "019fd361-25ad-38dc-b96f-5735d7c1f13a",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2021-31924.html
security	www.security.archlinux.org/CVE-2021-31924
yubico	www.yubico.com/support/security-advisories/ysa-2021-03
developers	www.developers.yubico.com/pam-u2f/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRBVOZEMVO72FV4Z5O4GBGSURXHWRGD3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IL3I5AKECLMK4ADLLACLOEF7H5CMNDP2/
security	www.security.gentoo.org/glsa/202208-11
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.8

CVSS 24.6

EPSS0.00089