{"schemaVersion":3,"id":"USN-8688-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"pam vulnerability\n\nJuthawong Naisanguansee discovered that PAM incorrectly cleared failed\nlogin attempt records when certain services invoked the account phase\nwithout first performing authentication. An attacker could possibly use\nthis issue to reset failed login counters, resulting in authentication\nlockout restrictions being bypassed.","dates":{"published":"2026-08-27T19:43:08.000Z","modified":"2026-08-31T17:16:06.871Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"pam","name":"pam","label":"pam","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pam","purlType":"deb","versions":[{"text":"< 1.1.8-3.6ubuntu2.18.04.6+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.3.1-5ubuntu4.7+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.4.0-11ubuntu2.8","noFixRecorded":false,"fixedIn":null},{"text":"< 1.5.3-5ubuntu5.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.8-3.6ubuntu2.18.04.6+esm2 | < 1.3.1-5ubuntu4.7+esm1 | < 1.4.0-11ubuntu2.8 | < 1.5.3-5ubuntu5.7","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8688-1","label":"ubuntu.com/security/notices/USN-8688-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://launchpad.net/bugs/2164901","label":"launchpad.net/bugs/2164901","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-08-27T19:43:08.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-31T17:16:06.871Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:24:00.689Z","stale":false,"partial":false}}