Lucene search
K

6 matches found

OSV
OSV
added 2023/11/06 5:15 p.m.1 views

AZL-35074 CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

6.6CVSS6.9AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2023/11/06 5:15 p.m.11 views

CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

6.6CVSS6.3AI score0.00037EPSS
Exploits0References12
UbuntuCve
UbuntuCve
added 2023/11/06 5:15 p.m.27 views

CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

6.6CVSS6.8AI score0.00037EPSS
Exploits0References4
Prion
Prion
added 2023/11/06 5:15 p.m.27 views

Design/Logic Flaw

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

4.4CVSS6.9AI score0.00037EPSS
Exploits0References11Affected Software2
AlpineLinux
AlpineLinux
added 2023/11/06 4:58 p.m.27 views

CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

6.6CVSS6.4AI score0.00037EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/09/28 1:44 a.m.1 views

SUSE CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

7.3CVSS6.7AI score0.00037EPSS
Exploits0References5
Rows per page
Query Builder