~ / search / GHSA-x9rg-q5fx-fx66

GHSA-x9rg-q5fx-fx66

Improper Input Validation in libpam4j

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-12197

Packages

EcosystemPackageAffectedFixed in
Maven org.kohsuke:libpam4j < 1.10 1.10

Details

As written in the advisory (Markdown source, shown as plain text).

It was found that libpam4j prior to 1.10 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

References

External links from the advisory. They lead to third-party sites.