CVE-2017-12197 PUBLISHED

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

EPSS 0.51% · 66.0th percentile

Risk Scores

EPSS Score
0.51%
66.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibpam4j0, 1.4-2
Ubuntu:14.04:LTSlibpam4j0, 1.4-2

Timeline

References

Open in Interactive Console →