Skip to content
OpenAdvisories

Vendor

OpenSC

11 known vulnerabilities.

Products

OpenSC 7 pam_pkcs11 3 OpenSC.tokend 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2025-24032

    PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)

    PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check if the user is capable of logging into the token. An attacker…

    OpenSC pam_pkcs11 pam-pkcs11 pam-pkcs11 Debian Ubuntu