CVE-2017-12197CWE-863

CVE-2017-12197: vulnerability in Red Hat, Inc. libpam4j

Published · Updated

Follow this CVE+ Monitor libpam4j+ Monitor org.kohsuke:libpam4j

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.
Affected products
Red Hat, Inc. · libpam4j