7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
29.6%
pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log
into accounts whose password hash, as stored in /etc/passwd or /etc/shadow,
has only two characters.