CVE-2017-12197

CVE-2017-12197 affects libpam4j (Java PAM wrapper) up to and including 1.8, where authentication did not correctly enforce account status because pam_acct_mgmt() was not called. A user with a valid password for a disabled/deactivated account could bypass restrictions and access sensitive informat...