CVE-2024-9313 - Vulnerability Details - OpenCVE

Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00507.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Canonical	Authd

Configuration 1 [-]

cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787
https://www.cve.org/CVERecord?id=CVE-2024-9313

History

Tue, 26 Aug 2025 17:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Canonical Canonical authd
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:canonical:authd::::::::
Vendors & Products		Canonical Canonical authd

Thu, 03 Oct 2024 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 03 Oct 2024 11:15:00 +0000

Type	Values Removed	Values Added
Description		Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.
References		https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787 https://www.cve.org/CVERecord?id=CVE-2024-9313
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2024-10-03T11:04:00.474Z

Updated: 2024-11-22T19:03:50.205Z

Reserved: 2024-09-27T23:20:52.963Z

Link: CVE-2024-9313

Vulnrichment

Updated: 2024-10-03T15:20:38.861Z

NVD

Status : Analyzed

Published: 2024-10-03T11:15:13.940

Modified: 2025-08-26T17:44:31.933

Link: CVE-2024-9313

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-9313", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2024-09-27T23:20:52.963Z", "datePublished": "2024-10-03T11:04:00.474Z", "dateUpdated": "2024-11-22T19:03:50.205Z"}, "containers": {"cna": {"affected": [{"packageName": "authd", "product": "Authd", "vendor": "Canonical Ltd.", "repo": "https://github.com/ubuntu/authd", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "0.3.5", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them."}], "references": [{"tags": ["issue-tracking"], "url": "https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787"}, {"tags": ["issue-tracking"], "url": "https://www.cve.org/CVERecord?id=CVE-2024-9313"}], "credits": [{"lang": "en", "type": "finder", "value": "Marco Trevisan"}, {"lang": "en", "value": "Didier Roche-Tolomelli", "type": "remediation developer"}, {"lang": "en", "value": "Mark Esler", "type": "coordinator"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-10-03T11:04:00.474Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-03T15:20:32.733162Z", "id": "CVE-2024-9313", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-22T19:03:50.205Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-9313", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-03T15:20:32.733162Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T15:20:38.861Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Marco Trevisan"}, {"lang": "en", "type": "remediation developer", "value": "Didier Roche-Tolomelli"}, {"lang": "en", "type": "coordinator", "value": "Mark Esler"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"repo": "https://github.com/ubuntu/authd", "vendor": "Canonical Ltd.", "product": "Authd", "versions": [{"status": "affected", "version": "0", "lessThan": "0.3.5", "versionType": "semver"}], "platforms": ["Linux"], "packageName": "authd"}], "references": [{"url": "https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787", "tags": ["issue-tracking"]}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-9313", "tags": ["issue-tracking"]}], "descriptions": [{"lang": "en", "value": "Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them."}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-10-03T11:04:00.474Z"}}}, "cveMetadata": {"cveId": "CVE-2024-9313", "state": "PUBLISHED", "dateUpdated": "2024-11-22T19:03:50.205Z", "dateReserved": "2024-09-27T23:20:52.963Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2024-10-03T11:04:00.474Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}