Aller au contenu
Se connecter
7.5 Élevée

CVE-2024-9312 Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions

Description

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

Produits et versions touchés

Produit Versions touchées Corrigé en
Authd 0.3 premières → < 0.3.6 0.3.6
authd 0.3 premières → < 0.3.6 0.3.6

Autres CVE de Authd

Les 2 CVE de Authd →
CVE-2024-9313 Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same… 8.8 Élevée
Suivre cette CVE