{"vulnerability": "CVE-2020-27780", "sightings": [{"uuid": "004c731e-a6cf-4276-9a47-cc6bb1cb78d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27780", "type": "seen", "source": "https://t.me/cibsecurity/21042", "content": "\u203c CVE-2020-27780 \u203c\n\nA flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-18T02:43:23.000000Z"}]}