Skip to content
OpenAdvisories
Medium DLA-1165-1 1 CVE

libpam4j - security update

Published Nov 7, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 libpam4j 1.4-2+deb7u1

Vulnerabilities 1

  • Medium 6.5
    CVE-2017-12197

    Improper Input Validation in libpam4j

    It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

    Red Hat libpam4j org.kohsuke:libpam4j libpam4j Ubuntu Maven