VDB

GCVE-110-MAGEIA-2018-234

GCVE-110-MAGEIA-2018-234
Advisory Published
Vulnetix · Advisory published May 16, 2018
It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pam_acct_mgmt() during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in (CVE-2017-12197).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibpam4j1.8-7.1.mga6 (unaffected), 0 (affected)—

Aliases

CVE-2017-12197

References

Updated libpam4j package fixes security vulnerability
advisory
Updated libpam4j package fixes security vulnerability
issue
Updated libpam4j package fixes security vulnerability
advisory

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›