CVE-2020-27780

CRITICAL · CVSS 9.8 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-27780

Severity

CRITICAL

CVSS

9.8

EPSS

1.96%

Linux

Original NVD Description

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.