CVE-2012-6140

pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local…

published April 24, 2013

CVSS
—
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00230 · 12.9th percentile
Published
2013-04-24T10:00Z
EPSS history
Timeline
  • 24 APR 10:00Z
    pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local…
    cvelistv5