PT-2018-4031 · Suse · Suse Linux Enterprise+1

Mcalmer · Published 2018-06-08 · Updated 2024-06-15 · CVE-2011-3172

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise versions prior to 12

Description A vulnerability in pam modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled.

Recommendations For versions prior to 12, update to version 12 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

CWE-304

Related Identifiers

CVE-2011-3172

OPENSUSE-SU-2024:10043-1

SUSE-SU-2018:1760-1

SUSE-SU-2018_1760-1

Affected Products

Suse Linux Enterprise

Suse

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2011-3172 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:1760-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10043-1 · Vendor Advisory
• https://build.opensuse.org/request/show/80346 · Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://lists.suse.com/pipermail/sle-security-updates/2018-June/004204.html · Note
• https://bugzilla.suse.com/show_bug.cgi?id=707645 · Note
• https://suse.com/security/cve/CVE-2011-3172.html · Note
• https://bugzilla.suse.com/707645 · Note
• https://suse.com/support/update/announcement/2018/suse-su-20181760-1 · Note
• https://suse.com/security/cve/CVE-2011-3172 · Note