Opensc Project Pam Pkcs11 vulnerabilities

1 vulnerability

Known vulnerabilities in Opensc Project Pam Pkcs11, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7CVE-2025-24531debianpam-pkcs11+4
EPSS score
0.23%
In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as an error triggered by a smartcard before login), allowing authentication bypass.