3580 matches found
CVE-2025-24500
The vulnerability allows an unauthenticated attacker to access information in PAM database...
CVE-2022-24755
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director = 18.2 = 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, it will skip authorization checks completely. Expired accounts and accounts...
CVE-2022-24756
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director = 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, a failed PAM authentication will leak a small amount of memory. An attacker that i...
CVE-2020-11847
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...
CVE-2024-9313
Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them...
Debian dla-4040 : libpam-u2f - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4040 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4040-1 [email protected] https://www.debian.org/lts/security/...
Security update for pam
This update for pam fixes the following issues: CVE-2024-10963: Fixed improper hostname interpretation in pamaccess that could lead to access control bypass bsc1233078. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2025:20104-1 Security update for pam
This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation in pamaccess that could lead to access control bypass bsc1233078...
[SECURITY] [DLA 4040-1] pam-u2f security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4040-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 03, 2025 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DLA-4040-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4040-1 pam-u2f - security update
Bulletin has no description...
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types...
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file...
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...
CVE-2025-24501
An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request...
CVE-2025-24500
The vulnerability allows an unauthenticated attacker to access information in PAM database...
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types...
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types...
CVE-2025-24506
Broadcom Symantec Privileged Access Management (PAM) is cited as affected by CVE-2025-24506. The connected PT-2025-5378 entry states: a specific authentication strategy allows learning the IDs of PAM users associated with certain authentication types, but it does not specify affected versions and...