Lucene search
K

4 matches found

OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.7 views

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2026-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00957EPSS
Exploits13References2
NVD
NVD
added 2025/07/23 3:15 p.m.7 views

CVE-2025-6018

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS0.00957EPSS
Exploits13References5
CVE
CVE
added 2025/07/23 2:58 p.m.109 views

CVE-2025-6018

CVE-2025-6018 is a Local Privilege Escalation in pam-config of Linux PAM. The PAM environment module pam_env.so can be fed via a user’s ~/.pam_environment and, if loaded before pam_systemd.so (e.g., in sshd PAM stacks), may cause Polkit to treat the user as a local active user and grant elevated ...

7.8CVSS7.9AI score0.00957EPSS
Exploits13References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/23 2:58 p.m.6 views

CVE-2025-6018 Pam-config: lpe from unprivileged to allow_active in pam

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS7.9AI score0.00957EPSS
Exploits13References4
Rows per page
Query Builder