CVE-2024-6512

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...

CVE-2024-6512

CVE-2024-6512: Affects Devolutions Server 2024.2.10 and earlier. The issue is an authorization bypass in the PAM access request approval mechanism that lets authenticated users with approval permissions approve their own requests, bypassing security restrictions. Impact described as an integrity ...

PT-2024-37681 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.2.10 and earlier Description: The issue allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...

EulerOS 2.0 SP8 : pam (EulerOS-SA-2024-2483)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for...

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2024-2483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Passwordless AND Keyless: The Future of (Privileged) Access Management

In IT environments, some secrets are managed well and some fly under the radar. Here's a quick checklist of what kinds of secrets companies typically manage, including one type they should manage: Passwords x TLS certificates x Accounts x SSH keys ??? The secrets listed above are typically secure...

RHSA-2024:3163 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2024:2438 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2015:1640 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2013:0590 Red Hat Security Advisory: nss-pam-ldapd security update

Bulletin has no description...

RHSA-2013:0521 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2010:0891 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2010:0819 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2007:0737 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2007:0555 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2007:0465 Red Hat Security Advisory: pam security and bug fix update

Bulletin has no description...

GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...