VULNERABILITY INTELLIGENCE

CVE-2008-4313

CVSS score6 MEDIUM
EPSS probability1.41%
CISA KEVNot currently listed
Published2008-11-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P

Description

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

Primary references