`PamHandle::get_user` can cause an authentication bypass

In affected versions, PamHandle::getuser can return ErrPAMSUCCESS after it gets the username successfully. PAM modules that return this "error" code from smauthenticate or smacctmgmt early-return a success code to PAM without doing any further verification. This means a user could log in when the...

PT-2025-63032

In affected versions, PamHandle::get user can return ErrPAM SUCCESS after it gets the username successfully. PAM modules that return this "error" code from sm authenticate or sm acct mgmt early-return a success code to PAM without doing any further verification. This means a user could log in whe...