Pam Config
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:pam-config:1.1.8-24.71.1:*:*:*:*:*:*:*
part: a version: 1.1.8-24.71.1 update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Pam Config (12d6c477-7afa-59d1-bd68-9297814a88aa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/suse/pam-config |
purl2cpe | 2026-06-01 10:12:20.464792 |
pkg:rpm/opensuse/pam-config |
purl2cpe | 2026-06-01 10:12:20.464795 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6018 |
vulnerable | 2026-06-08 07:43:13.993019 |
Pam-config: lpe from unprivileged to allow_active in pam
HIGH (7.8)
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.
Published: 2025-07-23T14:58:59.750Z
Updated: 2026-06-30T10:40:17.265Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.