1 matches found
pam: pam_env and pam_mail accessing users' file with root privileges
The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...
4.7CVSS5.8AI score0.00356EPSS
SaveExploits0References4
20