NetSight
IP …
medium6.5

CVE-2017-12197

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating.

Impact

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

Affected products

VendorProductAffected versions
Libpam4j ProjectLibpam4j
through 1.8
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux
Version 6.0

Weakness classification

CWE-863CWE-20

References