跳转到帖子

Red Hat OpenShift: CVE-2024-10963: pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

recommended_posts

发布于
  • Members

Red Hat OpenShift: CVE-2024-10963: pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:N)
Published
11/07/2024
Created
12/05/2024
Added
12/04/2024
Modified
02/10/2025

Description

A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.

Solution(s)

  • linuxrpm-upgrade-rhcos

References

  • https://attackerkb.com/topics/cve-2024-10963
  • CVE - 2024-10963
  • RHSA-2024:10232
  • RHSA-2024:10244
  • RHSA-2024:10379
  • RHSA-2024:10518
  • RHSA-2024:10528
  • RHSA-2024:10852
View more
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…