Daniel Gollub

1 exploit Active since Jun 2020
CVE-2020-13881 WRITEUP HIGH WRITEUP
pam_tacplus 1.3.8-1.5.1 - Sensitive Information Disclosure in Debug Logging
In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used.
CVSS 7.5