VDB
DEBIAN-CVE-2024-10963
DEBIAN-CVE-2024-10963
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
Risk Scores
CVSS v3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | pam | 0, 0 |
| Debian:13 | pam | 0, 0 |
Timeline
- Nov 7, 2024 CVE Published
- Apr 28, 2026 CVE Updated