Skip to content
OpenAdvisories

Package · Go

github.com/mohammed90/caddy-ssh

1 known vulnerabilities.

1 result · Feed

  • High 7.7

    Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library

    Not invoking a call to `pam_acct_mgmt` after a call to `pam_authenticate` to check the validity of a login can lead to an authorization bypass. ### Impact #### Exploitability The attack can be carried over the network. A complex non-standard configuration or …