CVE:CVE-2017-12197
CNNVD:CNNVD-201708-045
libpam4j是libpam.so的一个Java绑定。
libpam4j 1.8及之前版本中存在安全漏洞，该漏洞源于程序没有正确的验证用户账户。攻击者可利用该漏洞绕过安全限制并访问敏感信息。
solution:Upgrade libpam4j_project libpam4j to a higher version than 1.8,and avoid the version (,1.8]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade redhat enterprise_linux to a higher version than 6.0,and avoid the version 6.0