Required CVE Record Information
Description
The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.1 | MEDIUM | 4.0 | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Credits
- Abdel Adim `smaury` Oisfi of Shielder (https://www.shielder.com) - research@shielder.com finder
- Paolo Cavaglià of Shielder (https://www.shielder.com) - research@shielder.com finder
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.