CVE

Id
59383  
CVE No.
CVE-2012-6140  
Status
Candidate  
Description
pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604934 59383 CVE-2012-6140 MLIST:[oss-security] 20130418 Re: CVE-2012-XXYY Request -- google-authenticator: Information disclosure due insecure requirement on the secrets file  View
604935 59383 CVE-2012-6140 URL:http://openwall.com/lists/oss-security/2013/04/18/10  View
604936 59383 CVE-2012-6140 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129  View
604937 59383 CVE-2012-6140 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=953505  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30308 JVNDB-2012-006016 TYPO3 の Backend History モジュールにおけるクロスサイトスクリプティングの脆弱性 TYPO3 の Backend History モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6145 59383 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006016.html  View