CVE-2017-12197CWE-863

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating

published January 18, 2018

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01511 · 74.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2018-01-18T21:00Z
EPSS history
Timeline
  • 18 JAN 21:00Z
    It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating
    cvelistv5