CVE-2012-6140

Source
https://cve.org/CVERecord?id=CVE-2012-6140
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2012-6140.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2012-6140
Downstream
Published
2013-04-24T10:28:37Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

pamgoogleauthenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.

References

Affected packages