The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
      * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15099 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a 'complete' fix for CVE-2025-6020.(CVE-2025-8941)

    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions.(CVE-2025-6020)

Tenable has extracted the preceding description block directly from the EulerOS pam security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15100 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15101 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986130 advisory.

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 linux-pam 中发现一个缺陷。pam_namespace 模块可能未正确处理用户控制的路径从而允许本地用户利用符号链接攻击和争用条件将其权限提升为 root。
    此 CVE 提供针对 CVE-2025-6020的完整补丁。 (CVE-2025-8941)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2025:15103 公告中提及的漏洞的影响。

    可插拔认证模块 (PAM) 提供用于设置身份验证策略的系统，在无需重新编译程序的情况下即可处理身份验证。

    安全修复：

    * linux-pam对 CVE-2025-6020 的修复不完整 (CVE-2025-8941)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2025:15106 公告中提及的漏洞的影响。

    可插拔认证模块 (PAM) 提供用于设置身份验证策略的系统，在无需重新编译程序的情况下即可处理身份验证。

    安全修复：

    * linux-pam对 CVE-2025-6020 的修复不完整 (CVE-2025-8941)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2025:15107 公告中提及的漏洞的影响。

    可插拔认证模块 (PAM) 提供用于设置身份验证策略的系统，在无需重新编译程序的情况下即可处理身份验证。

    安全修复：

    * linux-pam对 CVE-2025-6020 的修复不完整 (CVE-2025-8941)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 9 主机上安装的程序包受到 RHSA-2025:15102 公告中提及的一个漏洞影响。

    可插拔认证模块 (PAM) 提供用于设置身份验证策略的系统，在无需重新编译程序的情况下即可处理身份验证。

    安全修复：

    * linux-pam对 CVE-2025-6020 的修复不完整 (CVE-2025-8941)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
261163	AlmaLinux 9 : pam (ALSA-2025:15099)	Nessus	Alma Linux Local Security Checks	2025/9/3	2025/9/3	high
261135	RHEL 9 : pam (RHSA-2025:15099)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
269930	RockyLinux 9 : pam (RLSA-2025:15099)	Nessus	Rocky Linux Local Security Checks	2025/10/10	2025/10/10	high
270049	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2239)	Nessus	Huawei Local Security Checks	2025/10/11	2025/10/11	high
270061	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2207)	Nessus	Huawei Local Security Checks	2025/10/11	2025/10/11	high
261133	RHEL 9 : pam (RHSA-2025:15100)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
261139	RHEL 9 : pam (RHSA-2025:15101)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
268317	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pam (UTSA-2025-986130)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/10	high
260020	Linux Distros 未修补的漏洞：CVE-2025-8941	Nessus	Misc.	2025/8/31	2025/10/14	high
261132	RHEL 8：pam (RHSA-2025:15103)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
261138	RHEL 7：pam (RHSA-2025:15106)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
261140	RHEL 8：pam (RHSA-2025:15107)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high
261141	RHEL 9：pam (RHSA-2025:15102)	Nessus	Red Hat Local Security Checks	2025/9/3	2025/9/3	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high