CVE-2024-10963 — Pam: improper hostname interpretation in pam_access leads to access control bypass
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pre…
Published: 2024-11-07 · CVSS: 7.4 · CVSS 3.1
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7