Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-13881

Fixed in a distro release EPSS 2%

In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used.

Published 2020-06-06 · CVE record · OSV

Products: pam_tacplus_project pam_tacplus, debian_linux, canonical ubuntu_linux, arista cloudvision_portal

Distro releases

ReleasePackageFixed in
Debian 8libpam-tacplus1.3.8-2+deb8u1
Debian 9libpam-tacplus1.3.8-2+deb9u1
Ubuntu 16.04 LTSlibpam-tacplus1.3.8-2+deb8u1build0.16.04.1
Ubuntu 18.04 LTSlibpam-tacplus1.3.8-2+deb8u1build0.18.04.1
Ubuntu 20.04 LTSlibpam-tacplus1.3.8-2+deb8u1build0.20.04.1
Ubuntu 22.04 LTSlibpam-tacplusno fix