Lucene search
K

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

🗓️ 23 Dec 2020 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 1 Views

Linux-Pam flaw before 1.5.1 lets empty passwords authenticate non-existent users via root.

Related
Detection
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2020-27780
17 Dec 202023:55
alpinelinux
ArchLinux
[ASA-202012-13] pam: authentication bypass
9 Dec 202000:00
archlinux
CBLMariner
CVE-2020-27780 affecting package pam 1.3.1-4
19 Mar 202216:40
cbl_mariner
Circl
CVE-2020-27780
18 Dec 202002:43
circl
CNNVD
Linux-pam Authorization Issues Vulnerability
30 Nov 202000:00
cnnvd
CVE
CVE-2020-27780
17 Dec 202023:55
cve
Cvelist
CVE-2020-27780
17 Dec 202023:55
cvelist
Debian CVE
CVE-2020-27780
17 Dec 202023:55
debiancve
EUVD
EUVD-2020-20284
7 Oct 202500:30
euvd
F5 Networks
K28116312: Linux-PAM vulnerability CVE-2020-27780
21 Feb 202318:33
f5
Rows per page
Vulners
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Dec 2020 08:00Current
7High risk
Vulners AI Score7
CVSS 3.19.8
CVSS 210
EPSS0.00444
1