Every CVE Search/ Get API key

CVE-2020-24612

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08...

6.7 MediumFix available

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.32%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.7

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
CVE-2020-24612
CVSS 3.1
6.7 MediumCVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:N/S:U/UI:N
Updated
2026-11-02
EUVDEUVD-2020-17329 6.7

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
EUVD-2020-17329
CVSS 3.1
6.7 MediumCVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:N/S:U/UI:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-j8gx-8c94-5x9v No score

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08...

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
GHSA-j8gx-8c94-5x9v
Updated
2026-11-02
NVD 6.7

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
CVE-2020-24612
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
OSV 4.7

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
CVE-2020-24612
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2022-1646 4.7

selinux-policy security update

SELinux Base package for SELinux Reference Policy - modular.

Security Fix(es):

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.(CVE-2020-24612)

Record
OESA-2022-1646
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-24612 6.7

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

Record
UBUNTU-CVE-2020-24612
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
selinux-policy
openEuler:20.03-LTS-SP1
 before 3.14.2-77.oe1
3.14.2-77.oe1
selinux-policy
openEuler:20.03-LTS-SP3
 before 3.14.2-76.oe1
3.14.2-76.oe1
refpolicy
Ubuntu:14.04:LTS
 All versions, plus listed versions
2:2.20110726-122:2.20110726-132:2.20131214-12:2.20140206-1
 None known
refpolicy
Ubuntu:16.04:LTS
 All versions, plus listed versions
2:2.20140421-9
 None known
refpolicy
Ubuntu:18.04:LTS
 All versions, plus listed versions
2:2.20161023.1-92:2.20161023.1-102:2.20171228-12:2.20180114-1
 None known
refpolicy
Ubuntu:20.04:LTS
 All versions, plus listed versions
2:2.20190201-42:2.20190201-52:2.20190201-62:2.20190201-72:2.20190201-8
 None known
refpolicy
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:2.20210203-72:2.20210203-92:2.20210203-10
 None known
refpolicy
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:2.20230929-12:2.20231010-12:2.20231119-12:2.20231119-22:2.20240202-1
 None known
refpolicy
Ubuntu:25.10
 All versions, plus listed versions
2:2.20241211-22:2.20250213-52:2.20250213-62:2.20250213-72:2.20250213-82:2.20250213-92:2.20250213-10
 None known
refpolicy
Ubuntu:26.10
 All versions, plus listed versions
2:2.20250213-112:2.20250213-132:2.20260804-12:2.20260929-1
 None known
refpolicy
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:2.20250213-102:2.20250213-11
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-24612 is a medium vulnerability (CVSS 6.7) in Fedoraproject Selinux-policy, published August 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in selinux-policy 3.14.2-77.oe1.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open