Canonical Ltd. Authd vulnerabilities

2 vulnerabilities

Known vulnerabilities in Canonical Ltd. Authd, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2024-9313canonical ltd.authd+2
EPSS score
0.58%
Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.7.5CVE-2024-9312canonical ltd.authd+2
EPSS score
0.28%
Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.