EulerOS 2.0 SP8 : pam (EulerOS-SA-2024-2483)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for...

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2024-2483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Passwordless AND Keyless: The Future of (Privileged) Access Management

In IT environments, some secrets are managed well and some fly under the radar. Here's a quick checklist of what kinds of secrets companies typically manage, including one type they should manage: Passwords x TLS certificates x Accounts x SSH keys ??? The secrets listed above are typically secure...

RHSA-2024:3163 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2024:2438 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2015:1640 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2013:0590 Red Hat Security Advisory: nss-pam-ldapd security update

Bulletin has no description...

RHSA-2013:0521 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2010:0891 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2010:0819 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2007:0737 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2007:0555 Red Hat Security Advisory: pam security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2007:0465 Red Hat Security Advisory: pam security and bug fix update

Bulletin has no description...

GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847

CVE-2020-11847 affects OpenText NetIQ Privileged Account Manager (PAM) prior to 3.7.0.1. An SSH-authenticated user can access the PAM server and run an OS command via bash to obtain full system access. The root cause is exposure of command execution during SSH access to the PAM server, as describ...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847: Improper Neutralization of Special Elements used in an OS Command

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...