PT-2024-6647 · Su+4 · Su+4
3V1N0
+3
·
Published
2024-10-03
·
Updated
2025-08-26
·
CVE-2024-9313
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Authd PAM module versions prior to 0.3.5
Description:
The issue is related to errors in privilege management, allowing a remote attacker to gain access to another user's account by executing commands such as
su, sudo, or ssh and modifying their transactions. This can enable broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.Recommendations:
For Authd PAM module versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue.
As a temporary workaround, consider restricting the use of
su, sudo, and ssh commands to minimize the risk of exploitation.
Additionally, ensure that tools such as su, sudo, and ssh are updated to versions that include the necessary fixes, such as su version that will include https://github.com/util-linux/util-linux/pull/3206, ssh version that will include https://github.com/openssh/openssh-portable/pull/521, and sudo version that will include https://github.com/sudo-project/sudo/pull/412.Fix
Improper Privilege Management
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Authd Pam Module
Suse
Ssh
Su
Sudo