Repository navigation
CPP: Pam Authorization Bypass #667
Description
Query PR
Language
C/C++
CVE(s) ID list
nvd.nist.gov/vuln/detail/CVE-2022-24755
CWE
CWE-285
Report
This is similar to #561 and #562.
Using pam_authenticate function call to grant access to a user can cause security issues. A pam_authenticate call only checks if the username and the password match. It does not check if the account is expired. Hence, a user with an expired login or an expired password can still login.
This PR aims to detect instances were an initiated PAM Transaction calls pam_authenticate but does not call pam_acct_mgtmt.
Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).
- Yes
- No
Blog post link
No response
Activity
ghsecuritylab commentedon May 26, 2022
Your submission is now in status Test run.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed
ghsecuritylab commentedon May 26, 2022
Your submission is now in status Results analysis.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed
ghsecuritylab commentedon Jun 8, 2022
Your submission is now in status Query review.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed
geoffw0 commentedon Jun 13, 2022
Hi @porcupineyhairs, I'm no longer responsible for this issue but I've poked the team who are. Hope that sorts things out.
ghsecuritylab commentedon Jun 14, 2022
Your submission is now in status Final decision.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed
ghsecuritylab commentedon Jun 15, 2022
Your submission is now in status Pay.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed
xcorail commentedon Jun 15, 2022
Created Hackerone report 1602234 for bounty 398647 : [667] CPP: Pam Authorization Bypass
ghsecuritylab commentedon Jun 15, 2022
Your submission is now in status Closed.
For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed