Lucene search
+L

1 matches found

OSV
OSV
added 2022/09/23 9:37 p.m.20 views

GHSA-GMHJ-XJFH-CF6M Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library

Not invoking a call to pamacctmgmt after a call to pamauthenticate to check the validity of a login can lead to an authorization bypass. Impact Exploitability The attack can be carried over the network. A complex non-standard configuration or a specialized condition is required for the attack to ...

7.7CVSS7.3AI score
SaveExploits0References3
Rows per page
Query Builder