CVE-2023-40660: Improper Authentication

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

OpenSC Security Vulnerabilities

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC versions 0.17.0 through 0.23.0 that stems from a potential PIN bypass when a token card is inserted into a computer and authenticated...