Kurz gesagt
- CVE-2017-12197 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in org.kohsuke:libpam4j, libpam4j (libpam4j project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 74.6% aller Schwachstellen.
- Abhilfe: auf 1.10 oder neuer aktualisieren.
Description
It was found that libpam4j prior to 1.10 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
NVD description
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free