Skip to content
fr Sign in
7.5 High

CVE-2024-9312 Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions

Description

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

Affected products and versions

Product Affected versions Fixed in
Authd 0.3 earliest → < 0.3.6 0.3.6
authd 0.3 earliest → < 0.3.6 0.3.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Authd

The 2 CVEs of Authd →
CVE-2024-9313 Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same… 8.8 High
Track this CVE