CVE-2024-10963
CVE-2024-10963: A vulnerability exists in pam_access where configuration rules are incorrectly interpreted as hostnames, potentially granting unauthorized access. Attackers can exploit this by impersonating trusted hostnames to bypass security measures. This flaw poses a significant risk to systems utilizing pam_access for access control. With an SVRS of 30, while not critical, immediate patching is not necessary, but constant monitoring is still advised. Exploitation could lead to unauthorized access to services and terminals, compromising system integrity. The incorrect hostname handling within pam_access allows attackers to circumvent intended access restrictions.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.