Sebezhetőség a pam_oath-ban, amely lehetővé teszi a root jogosultságok megszerzését a rendszerben.
A PAM module pam_oath, part of the oath-toolkit package and used for two-factor authentication with one-time passwords (OTP), has a vulnerability (CVE-2024-47191) that allows a non-privileged user to gain root access to the system. The pam_oath module runs with root privileges and was originally designed to store OATH keys in the file /etc/users.oath, which is only accessible to the root user. The oath-toolkit version 2.6.7 […]
