Python: Add `@security-severity` to `py/pam-auth-bypass`

The value 8.1 was calculated by our internal tool. This corresponds to a
'High' severity, which from my gut feeling seems reasonable for
authorization bypass.
This commit is contained in:
Rasmus Wriedt Larsen 2022-05-11 14:56:21 +02:00
Родитель 0956d506de
Коммит 044829c3bb
1 изменённых файлов: 1 добавлений и 0 удалений

Просмотреть файл

@ -3,6 +3,7 @@
* @description Not using `pam_acct_mgmt` after `pam_authenticate` to check the validity of a login can lead to authorization bypass.
* @kind problem
* @problem.severity warning
* @security-severity 8.1
* @precision high
* @id py/pam-auth-bypass
* @tags security