Vulnerabilities

TI-2021-11912 CVE-2021-31924 · GHSA-v2qj-ch59-r5g4

Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f…

LOW 30

Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00333 Published 2021-05-25 No fix listed CWE-287

TI-2019-09116 CVE-2019-12210 · GHSA-pxf2-5pmm-5r8f

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set…

LOW 39

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02056 Published 2019-06-04 No fix listed

TI-2019-09115 CVE-2019-12209 · GHSA-cf2r-5chq-jmm8

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default…

LOW 38

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symlinks pointing to othe…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02807 Published 2019-06-04 No fix listed CWE-59

Vulnerabilities

Filters

Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f…

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set…

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default…