| CVE-2025-24507 |
This vulnerability allows appliance compromise at boot time
|
8.9
High
|
Jan 30, 2025 |
| CVE-2025-24506 |
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
|
5.3
Medium
|
Jan 30, 2025 |
| CVE-2025-24505 |
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
|
8.8
High
|
Jan 30, 2025 |
| CVE-2025-24504 |
An improper input validation the CSRF filter results in unsanitized user input written to the application logs
|
5.3
Medium
|
Jan 30, 2025 |
| CVE-2025-24503 |
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM…
|
9.3
Critical
|
Jan 30, 2025 |
| CVE-2025-24502 |
An improper session validation allows an unauthenticated attacker to cause certain request notifications to be…
|
5.3
Medium
|
Jan 30, 2025 |
| CVE-2025-24501 |
An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP…
|
5.3
Medium
|
Jan 30, 2025 |
| CVE-2025-24500 |
The vulnerability allows an unauthenticated attacker to access information in PAM database
|
8.7
High
|
Jan 30, 2025 |
| CVE-2024-38496 |
The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group…
|
5.1
Medium
|
Jul 15, 2024 |
| CVE-2024-38495 |
A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database
|
5.3
Medium
|
Jul 15, 2024 |
| CVE-2024-38494 |
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
|
8.6
High
|
Jul 15, 2024 |
| CVE-2024-38493 |
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface
|
6.8
Medium
|
Jul 15, 2024 |
| CVE-2024-38492 |
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system…
|
9.4
Critical
|
Jul 15, 2024 |
| CVE-2024-38491 |
The vulnerability allows an unauthenticated attacker to read arbitrary information from the database
|
8.4
High
|
Jul 15, 2024 |
| CVE-2024-36458 |
The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions
|
5.1
Medium
|
Jul 15, 2024 |
| CVE-2024-36457 |
The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint
|
5.3
Medium
|
Jul 15, 2024 |
| CVE-2024-36456 |
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system…
|
9.4
Critical
|
Jul 15, 2024 |
| CVE-2024-36455 |
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected…
|
9.4
Critical
|
Jul 15, 2024 |