Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 12 | pam-pkcs11 | 0.6.12-1+deb12u1 |
Vulnerabilities 2
-
Critical 9.2
PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)
PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check if the user is capable of logging into the token. An attacker…
-
Medium 6.7
In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as …