1 matches found
AZL-35074 CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...
6.6CVSS6.9AI score0.00925EPSS
SaveExploits0References1
20