Yubico

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Yubico records in CISA KEV

No Yubico vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yubihsm-shell 4 records LOW Pam-u2f 3 records LOW Yubikey 5 Nfc Firmware 3 records LOW Libu2f-host 2 records LOW Libykpiv 2 records LOW Piv Manager 2 records LOW Piv Tool 2 records LOW Piv Tool Manager 2 records LOW

Records

3 records in Pam-u2f · all components

TI-2019-09116 CVE-2019-12210 · GHSA-pxf2-5pmm-5r8f

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set…

LOW 39

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02056 Published 2019-06-04 No fix listed

TI-2019-09115 CVE-2019-12209 · GHSA-cf2r-5chq-jmm8

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default…

LOW 38

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symlinks pointing to othe…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02807 Published 2019-06-04 No fix listed CWE-59

TI-2021-11912 CVE-2021-31924 · GHSA-v2qj-ch59-r5g4

Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f…

LOW 30

Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00333 Published 2021-05-25 No fix listed CWE-287

Open these records in search →

Critical	1
High	14
Medium	13
Low	2
No CVSS	0