Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2015-3238
HistoryAug 24, 2015 - 2:59 p.m.

Default credentials

2015-08-2414:59:00
PRIOn knowledge base
www.prio-n.com
5

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

6.5 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.009 Low

EPSS

Percentile

82.0%

JSON

The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.

Related

ibm 16
fedora 2
nessus 16
openvas 18
mageia 1
centos 1
ubuntucve 1
veracode 1
cvelist 1
oraclelinux 1
redhat 1
f5 2
debiancve 1
amazon 1
cve 1
cloudfoundry 1
ubuntu 3
gentoo 1
suse 3
oracle 1
ibm
ibm
Security Bulletin: Vulnerabilities in Open Source pam affect IBM Security Identity Governance Appliance (CVE-2015-3238)
2018-06-16 21:39:51
Security Bulletin: A vulnerability in the Linux Pluggable Authentication Module (PAM) affects the IBM FlashSystem model V9000 (CVE-2015-3238)
2018-06-18 00:10:21
Security Bulletin: A vulnerability in Pluggable Authentication Modules (PAM) affects IBM Security Network Protection (CVE-2015-3238)
2018-06-16 21:31:50
fedora
fedora
[SECURITY] Fedora 21 Update: pam-1.1.8-19.fc21
2015-07-03 18:39:15
[SECURITY] Fedora 22 Update: pam-1.1.8-19.fc22
2015-06-30 20:20:46
nessus
nessus
RHEL 6 / 7 : pam (RHSA-2015:1640)
2015-08-19 00:00:00
Scientific Linux Security Update : pam on SL6.x, SL7.x i386/x86_64 (20150818)
2015-08-20 00:00:00
CentOS 6 / 7 : pam (CESA-2015:1640)
2015-08-19 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2018-1375)
2020-01-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-589)
2015-09-08 00:00:00
Oracle: Security Advisory (ELSA-2015-1640)
2015-10-06 00:00:00
mageia
mageia
Updated pam package fixes security vulnerability
2015-07-05 20:22:03
centos
centos
pam security update
2015-08-18 15:30:42
ubuntucve
ubuntucve
CVE-2015-3238
2015-08-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:22
cvelist
cvelist
CVE-2015-3238
2015-08-24 14:00:00
oraclelinux
oraclelinux
pam security update
2015-08-18 00:00:00
redhat
redhat
(RHSA-2015:1640) Moderate: pam security update
2015-08-18 00:00:00
f5
f5
SOL17494 - PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
K17494 : PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
debiancve
debiancve
CVE-2015-3238
2015-08-24 14:59:00
amazon
amazon
Medium: pam
2015-09-02 12:00:00
cve
cve
CVE-2015-3238
2015-08-24 14:59:00
cloudfoundry
cloudfoundry
USN-2935-2 PAM regression | Cloud Foundry
2016-05-06 00:00:00
ubuntu
ubuntu
PAM regression
2016-03-17 00:00:00
PAM vulnerabilities
2016-03-16 00:00:00
PAM regression
2016-03-16 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2016-05-31 00:00:00
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

6.5 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.009 Low

EPSS

Percentile

82.0%

JSON
Related for PRION:CVE-2015-3238
ibm16fedora2nessus16openvas18mageia1centos1ubuntucve1veracode1cvelist1oraclelinux1redhat1f52debiancve1amazon1cve1cloudfoundry1ubuntu3gentoo1suse3oracle1