Auth bypass in HP Hp-Ux

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.

Vulnerability class: Broken Authentication

EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.

Affected products

Hp Hp-ux — versions b.11.11, b.11.23, b.11.31
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory, Patch)