Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-9313
Analyzed
More InfoOfficial Page
Source-security@ubuntu.com
View Known Exploited Vulnerability (KEV) details
Published At-03 Oct, 2024 | 11:15
Updated At-26 Aug, 2025 | 17:44

Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.18.8HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE Matches
Canonical Ltd.
canonical
>>authd>>Versions before 0.3.5(exclusive)
cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-noinfoPrimarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787security@ubuntu.com
Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-9313security@ubuntu.com
Third Party Advisory
Change History
0Changes found
Details not found