Skip to content

Commit 044829c

Browse files
committed
Python: Add @security-severity to py/pam-auth-bypass
The value 8.1 was calculated by our internal tool. This corresponds to a 'High' severity, which from my gut feeling seems reasonable for authorization bypass.
1 parent 0956d50 commit 044829c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

python/ql/src/Security/CWE-285/PamAuthorization.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
* @description Not using `pam_acct_mgmt` after `pam_authenticate` to check the validity of a login can lead to authorization bypass.
44
* @kind problem
55
* @problem.severity warning
6+
* @security-severity 8.1
67
* @precision high
78
* @id py/pam-auth-bypass
89
* @tags security

0 commit comments

Comments
 (0)