11 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-13881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In support.c in pamtacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used. CVE-2020-13881 Not...
CVE-2020-13881
In support.c in pamtacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used...
[SECURITY] [DLA 2730-1] libpam-tacplus security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2730-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 04, 2021 https://wiki.debian.org/LTS -...
Debian DLA-2730-1 : libpam-tacplus - LTS security update
The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2730 advisory. It was discovered that there was an issue in libpam-tacplus a security module for using the TACACS+ authentication service where shared secrets such as private server keys...
Security Advisory 0050
Security Advisory 0050 PDF Date: September 9th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | September 9th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-13881 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description This advisory...
Photon OS 1.0: Pam_Tacplus PHSA-2020-1.0-0319
An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0319. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Pam_Tacplus PHSA-2020-2.0-0280
An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0280. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Debian: Security Advisory (DLA-2239-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2239-1] libpam-tacplus security update
Package : libpam-tacplus Version : 1.3.8-2+deb8u1 CVE ID : CVE-2020-13881 It was discovered that there was an issue in libpam-tacplus a security module for using the TACACS+ authentication service where shared secrets such as private server keys were being added in the clear to various logs. For...
CVE-2020-13881
CVE-2020-13881 affects pam_tacplus where the TACACS+ shared secret is logged via journald/syslog when DEBUG is enabled. The initial description notes logging of the shared secret for versions 1.3.8–1.5.1. Connected advisories confirm affected packages and provide remediation: Debian/Ubuntu adviso...
