从这个网页截图中，可以获取到以下关于漏洞的关键信息： 1. 漏洞描述： - 漏洞名称：PAM module may allow accessing with the credentials of another user - 漏洞级别：High - 发布者：didrocks - 漏洞编号：GHSA-x5q3-c8rm-w787 - 发布时间：3 days ago 2. 受影响版本： - 受影响版本：< 0.3.5 - 已修复版本：0.3.5 3. 描述： - Authd PAM module up to version 0.3.4 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them. - This is possible using tools such as , or (and potentially others) that, so far, do not ensure that the PAM user at the end of the transaction is matching the one who initiated the transaction. - Authd 0.3.5 fixes this by not allowing changing the user unless it was never set before in the PAM stack. 4. 工具列表： - version that will include will not be affected - version that will include will not be affected - version that will include will not be affected - not affected - not affected 5. CVSS v3 base metrics： - Attack vector: Network - Attack complexity: Low - Privileges required: Low - User interaction: None - Scope: Unchanged - Confidentiality: High - Integrity: High - Availability: High 6. CVE ID： - CVE-2024-9313 7. 弱点： - No CWEs 8. 信用： - Finder: 3v1n0 - Remediation reviewer: didrocks