CVE Catalog

CVE-2016-4422

Critical
Published: Translated: NVD NIST

Summary

The pam_sm_authenticate function in pam_sshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account.

Risk Assessment

The organization may be exposed to unauthorized access to systems, potentially leading to privilege escalation and security breaches.

Recommendation

It is recommended to update libpam-sshauth to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

The pam_sm_authenticate function in pam_sshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS