зеркало из https://github.com/github/codeql.git
Python: Add `@security-severity` to `py/pam-auth-bypass`
The value 8.1 was calculated by our internal tool. This corresponds to a 'High' severity, which from my gut feeling seems reasonable for authorization bypass.
This commit is contained in:
Родитель
0956d506de
Коммит
044829c3bb
|
@ -3,6 +3,7 @@
|
|||
* @description Not using `pam_acct_mgmt` after `pam_authenticate` to check the validity of a login can lead to authorization bypass.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
* @security-severity 8.1
|
||||
* @precision high
|
||||
* @id py/pam-auth-bypass
|
||||
* @tags security
|
||||
|
|
Загрузка…
Ссылка в новой задаче