According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a 'complete' fix for CVE-2025-6020.(CVE-2025-8941)

    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions.(CVE-2025-6020)

Tenable has extracted the preceding description block directly from the EulerOS pam security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15099 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15100 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15101 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986130 advisory.

    A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths,     allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root.
    This CVE provides a complete fix for CVE-2025-6020.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15099 advisory.

    * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
      * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2025:15100 公告中提及的一個弱點影響。

    插入式驗證模組 (PAM) 提供一個系統，使用者無需重新編譯用於處理驗證之程式，便可設定驗證原則。

    安全性修正：

    * linux-pam CVE-2025-6020 的修正不完整 (CVE-2025-8941)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2025:15101 公告中提及的一個弱點影響。

    插入式驗證模組 (PAM) 提供一個系統，使用者無需重新編譯用於處理驗證之程式，便可設定驗證原則。

    安全性修正：

    * linux-pam CVE-2025-6020 的修正不完整 (CVE-2025-8941)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 RockyLinux 9 主機已安裝受到多個弱點影響的套件如 RLSA-2025:15099 公告中所提及。

    * linux-pam：Linux-pam 目錄遊走 (CVE-2025-6020)

    * linux-pam：CVE-2025-6020 的修正不完整 (CVE-2025-8941)

Tenable 已直接從 RockyLinux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2025:15099 公告中提及的多個弱點影響。

    插入式驗證模組 (PAM) 提供一個系統，使用者無需重新編譯用於處理驗證之程式，便可設定驗證原則。

    安全性修正：

    * linux-pam：Linux-pam 目錄遊走 (CVE-2025-6020)

    * linux-pam：CVE-2025-6020 的修正不完整 (CVE-2025-8941)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 AlmaLinux 9 主機已安裝受到 ALSA-2025:15099 公告中所提及的多個弱點影響的套件。

    * linux-pam：Linux-pam 目錄遊走 (CVE-2025-6020)
      * linux-pam CVE-2025-6020 的修正不完整 (CVE-2025-8941)

Tenable 已直接從 AlmaLinux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	Name	Product	Family	Published	Updated	Severity
270049	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2239)	Nessus	Huawei Local Security Checks	10/11/2025	10/11/2025	high
269930	RockyLinux 9 : pam (RLSA-2025:15099)	Nessus	Rocky Linux Local Security Checks	10/10/2025	10/10/2025	high
261135	RHEL 9 : pam (RHSA-2025:15099)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
261133	RHEL 9 : pam (RHSA-2025:15100)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
261139	RHEL 9 : pam (RHSA-2025:15101)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
268317	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pam (UTSA-2025-986130)	Nessus	Unity Linux Local Security Checks	10/7/2025	10/10/2025	high
270061	EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-2207)	Nessus	Huawei Local Security Checks	10/11/2025	10/11/2025	high
261163	AlmaLinux 9 : pam (ALSA-2025:15099)	Nessus	Alma Linux Local Security Checks	9/3/2025	9/3/2025	high
261133	RHEL 9：pam (RHSA-2025:15100)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
261139	RHEL 9：pam (RHSA-2025:15101)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
269930	RockyLinux 9pam (RLSA-2025:15099)	Nessus	Rocky Linux Local Security Checks	10/10/2025	10/10/2025	high
261135	RHEL 9：pam (RHSA-2025:15099)	Nessus	Red Hat Local Security Checks	9/3/2025	9/3/2025	high
261163	AlmaLinux 9pam (ALSA-2025:15099)	Nessus	Alma Linux Local Security Checks	9/3/2025	9/3/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high