A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.

According to the versions of the pam packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a 'complete' fix for CVE-2025-6020.(CVE-2025-8941)

    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions.(CVE-2025-6020)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization pam security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.1.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.1.1.1 advisory.

  - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset     of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some     rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could     be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through     10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created     but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users     are recommended to upgrade to version [FIXED_VERSION], which fixes the issue. (CVE-2025-31651)

  - Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc     credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4     to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with     `trust_env=False` on one's Requests Session. (CVE-2024-47081)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

  - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-     based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema     with certain identity constraints, or a crafted XML schema must be used. (CVE-2025-32415)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1.10 advisory.

  - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset     of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some     rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could     be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through     10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created     but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users     are recommended to upgrade to version [FIXED_VERSION], which fixes the issue. (CVE-2025-31651)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

  - Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made     you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through     10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected. Users are recommended     to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue. (CVE-2025-48989)

  - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP     priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A     large number of such requests could trigger an OutOfMemoryException resulting in a denial of service. This     issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2     through 11.0.5. The following versions were EOL at the time the CVE was created but are known to be     affected: 8.5.90 though 8.5.100. Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6     which fix the issue. (CVE-2025-31650)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-11.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0 advisory.

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings     in tinfo/read_entry.c in the terminfo library. (CVE-2022-29458)

  - There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration     APIs. The tar implementation would process tar archives with negative offsets without error, resulting in     an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability     can be mitigated by including the following patch after importing the tarfile module:
    https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 (CVE-2025-8194)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.1.11. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.11 advisory.

  - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset     of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some     rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could     be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through     10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created     but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users     are recommended to upgrade to version [FIXED_VERSION], which fixes the issue. (CVE-2025-31651)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

  - Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made     you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through     10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected. Users are recommended     to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue. (CVE-2025-48989)

  - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP     priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A     large number of such requests could trigger an OutOfMemoryException resulting in a denial of service. This     issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2     through 11.0.5. The following versions were EOL at the time the CVE was created but are known to be     affected: 8.5.90 though 8.5.100. Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6     which fix the issue. (CVE-2025-31650)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a 'complete' fix for CVE-2025-6020.(CVE-2025-8941)

Tenable has extracted the preceding description block directly from the EulerOS pam security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of pam installed on the remote host is prior to 1.1.8-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3057 advisory.

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1257 advisory.

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0777 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-6020:
    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions.

    CVE-2025-8941:
    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a 'complete' fix for CVE-2025-6020.(CVE-2025-8941)

    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions.(CVE-2025-6020)

Tenable has extracted the preceding description block directly from the EulerOS pam security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986130 advisory.

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:14557 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:14557 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15099 advisory.

    [1.5.1-26.0.1]
    - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]

    [1.5.1-26]
    - pam_namespace: fix potential privilege escalation.
      Resolves: CVE-2025-6020 and RHEL-96729

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
      * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15102 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15107 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15101 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15106 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15105 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15099 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15104 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15100 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15103 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020. (CVE-2025-8941)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14557 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
279315	EulerOS Virtualization 2.13.0 : pam (EulerOS-SA-2025-2591)	Nessus	Huawei Local Security Checks	high
279281	EulerOS Virtualization 2.13.1 : pam (EulerOS-SA-2025-2556)	Nessus	Huawei Local Security Checks	high
278726	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.1.1.1)	Nessus	Misc.	high
278724	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.10)	Nessus	Misc.	high
278723	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0)	Nessus	Misc.	high
277072	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.11)	Nessus	Misc.	high
276476	EulerOS 2.0 SP13 : pam (EulerOS-SA-2025-2452)	Nessus	Huawei Local Security Checks	high
274667	Amazon Linux 2 : pam, --advisory ALAS2-2025-3057 (ALAS-2025-3057)	Nessus	Amazon Linux Local Security Checks	high
274652	Amazon Linux 2023 : pam, pam-devel (ALAS2023-2025-1257)	Nessus	Amazon Linux Local Security Checks	high
270645	TencentOS Server 3: pam (TSSA-2025:0777)	Nessus	Tencent Local Security Checks	high
270061	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2207)	Nessus	Huawei Local Security Checks	high
270049	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2239)	Nessus	Huawei Local Security Checks	high
269930	RockyLinux 9 : pam (RLSA-2025:15099)	Nessus	Rocky Linux Local Security Checks	high
268317	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pam (UTSA-2025-986130)	Nessus	Unity Linux Local Security Checks	high
261705	RockyLinux 8 : pam (RLSA-2025:14557)	Nessus	Rocky Linux Local Security Checks	high
261225	AlmaLinux 8 : pam (ALSA-2025:14557)	Nessus	Alma Linux Local Security Checks	high
261194	Oracle Linux 9 : pam (ELSA-2025-15099)	Nessus	Oracle Linux Local Security Checks	high
261163	AlmaLinux 9 : pam (ALSA-2025:15099)	Nessus	Alma Linux Local Security Checks	high
261141	RHEL 9 : pam (RHSA-2025:15102)	Nessus	Red Hat Local Security Checks	high
261140	RHEL 8 : pam (RHSA-2025:15107)	Nessus	Red Hat Local Security Checks	high
261139	RHEL 9 : pam (RHSA-2025:15101)	Nessus	Red Hat Local Security Checks	high
261138	RHEL 7 : pam (RHSA-2025:15106)	Nessus	Red Hat Local Security Checks	high
261136	RHEL 8 : pam (RHSA-2025:15105)	Nessus	Red Hat Local Security Checks	high
261135	RHEL 9 : pam (RHSA-2025:15099)	Nessus	Red Hat Local Security Checks	high
261134	RHEL 8 : pam (RHSA-2025:15104)	Nessus	Red Hat Local Security Checks	high
261133	RHEL 9 : pam (RHSA-2025:15100)	Nessus	Red Hat Local Security Checks	high
261132	RHEL 8 : pam (RHSA-2025:15103)	Nessus	Red Hat Local Security Checks	high
260020	Linux Distros Unpatched Vulnerability : CVE-2025-8941	Nessus	Misc.	high
255194	RHEL 8 : pam (RHSA-2025:14557)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2025-8941

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high