CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Linux.
CVE
CVE-2020-27780
Severity
CRITICAL
CVSS
9.8
EPSS
1.96%
Linux
Original NVD Description
A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.
Related CVEs
Other vulnerabilities affecting the same vendor(s)