Vulnerabilities > CVE-2016-20014 - Unspecified vulnerability in PAM Tacplus Project PAM Tacplus 1.3.8/1.3.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |