A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02015-1 advisory.

    - CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02002-1 advisory.

    - CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02001-1 advisory.

    - CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226).
    - pam_namespace: convert functions that may operate on a user-controlled path to operate on file     descriptors instead of absolute path (bsc#1244509).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02005-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02003-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02004-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02013-1 advisory.

    - CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226).
    - CVE-2025-6020: pam_namespace: convert functions that may operate on a user-controlled path to operate on     file descriptors instead of absolute path (bsc#1244509).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:02081-1 advisory.

    - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of     the SESSION stack (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02082-1 advisory.

    - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of     the SESSION stack (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02032-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02031-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02080-1 advisory.

    - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of     the SESSION stack (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02026-1 advisory.

    - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
240836	SUSE SLES15 Security Update : gdm (SUSE-SU-2025:02015-1)	Nessus	SuSE Local Security Checks	high
240827	SUSE SLES12 Security Update : gdm (SUSE-SU-2025:02002-1)	Nessus	SuSE Local Security Checks	high
240803	SUSE SLES12 Security Update : pam (SUSE-SU-2025:02001-1)	Nessus	SuSE Local Security Checks	high
240790	SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2025:02005-1)	Nessus	SuSE Local Security Checks	high
240768	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gdm (SUSE-SU-2025:02003-1)	Nessus	SuSE Local Security Checks	high
240763	SUSE SLES15 Security Update : gdm (SUSE-SU-2025:02004-1)	Nessus	SuSE Local Security Checks	high
240745	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam (SUSE-SU-2025:02013-1)	Nessus	SuSE Local Security Checks	high
240616	SUSE SLES12 Security Update : pam-config (SUSE-SU-2025:02081-1)	Nessus	SuSE Local Security Checks	high
240612	SUSE SLES15 Security Update : pam-config (SUSE-SU-2025:02082-1)	Nessus	SuSE Local Security Checks	high
240573	SUSE SLES12 Security Update : pam_pkcs11 (SUSE-SU-2025:02032-1)	Nessus	SuSE Local Security Checks	high
240571	SUSE SLES15 Security Update : pam_pkcs11 (SUSE-SU-2025:02031-1)	Nessus	SuSE Local Security Checks	high
240542	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam-config (SUSE-SU-2025:02080-1)	Nessus	SuSE Local Security Checks	high
240538	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_pkcs11 (SUSE-SU-2025:02026-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2025-6018

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high