Login Request a demo
PA
Product
Pam-u2f
by Yubico · last CVE May 26, 2021
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pam-u2f to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12210
8.1
2%
Jun 4
In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned
Affected: 1.0.7
CVE-2019-12209
7.5
3%
Jun 4
Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that…
Affected: 1.0.7
CVE-2021-31924
6.8
0%
May 26
Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass
Affected: before 1.1.1
Showing 3