The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.
CVSS 2.0MEDIUM 4.3·Network·No auth·Interaction —·EPSS 0.02484·Published 2014-05-08·Will not fixCWE-310
