CVE-2017-12197: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only; version 9.0 only
• LIBPAM4J Project LIBPAM4J: up to and including 1.8
• Red Hat Enterprise Linux: version 6.0 only

Published 2018-01-18. Last modified 2026-06-17.