CVE-2022-37030

Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox…

published August 4, 2022

CVSS
—
EPSS
0%
Percentile
26.0
In the wild
Unconfirmed
What it is

Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox group to have the PAM stack execute arbitrary code upon loading the Gromox PAM module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00338 · 26.0th percentile
Published
2022-08-04T22:04Z
EPSS history
Timeline
  • 04 AUG 22:04Z
    Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox…
    cvelistv5