CVE-2011-3172

9.8 criticalEPSS 1.0%

Critical (9.8) in suse suse linux enterprise server. EPSS 1.0% chance of exploitation in the next 30 days.

A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWEs: CWE-264, CWE-304
Published: 2018-06-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

suse:suse_linux_enterprise_server

References

https://bugzilla.suse.com/show_bug.cgi?id=707645
https://build.opensuse.org/request/show/80346
https://bugzilla.suse.com/show_bug.cgi?id=707645
https://build.opensuse.org/request/show/80346

Check your stack JSON