31 matches found
EUVD-2022-5757
Malicious code in bioql PyPI...
Debian: Security Advisory (DLA-1165-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-X9RG-Q5FX-FX66 Improper Input Validation in libpam4j
It was found that libpam4j prior to 1.10 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)
org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: GHSA-X9RG-Q5FX-FX66...
Improper Input Validation in libpam4j
It was found that libpam4j prior to 1.10 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
Mageia: Security Advisory (MGASA-2018-0234)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2018-0234 Updated libpam4j package fixes security vulnerability
It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pamacctmgmt during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in CVE-2017-12197...
Updated libpam4j package fixes security vulnerability
It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pamacctmgmt during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in CVE-2017-12197...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
UBUNTU-CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
Design/Logic Flaw
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
CVE-2017-12197
CVE-2017-12197 affects libpam4j (Java PAM wrapper) up to and including 1.8, where authentication did not correctly enforce account status because pam_acct_mgmt() was not called. A user with a valid password for a disabled/deactivated account could bypass restrictions and access sensitive informat...
CVE-2017-12197
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)
org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: MEND:CVE-2017-12197...
CVE-2017-12197: Incorrect Authorization
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information...
Debian DSA-4025-1 : libpam4j - security update
It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pamacctmgmt during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...