[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faikiymVtHyMmwJrXwx7aa3CU4VO08Wd4c35Q_I01nRc":3,"g5a-risk:CVE-2017-20002":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":67,"weaknesses":68,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":26,"otxData":26,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":115,"notableEvents":116},"CVE-2017-20002","What is CVE-2017-20002?","The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts\u002F0 and pts\u002F1 as physical terminals in \u002Fetc\u002Fsecuretty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges.","The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts\u002F0 and pts\u002F1 as physical terminals in \u002Fetc\u002Fsecuretty. This allows local users to log...","2021-03-17T06:15:12.107","2021-06-07T14:58:56.823",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",3.9,6.4,0.00404,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"debian","shadow","4.4","cpe:2.3:a:debian:shadow:4.4:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",2,[54,60,64],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=877374","Debian",[58,59],"Mailing List","Vendor Advisory",{"url":61,"source":56,"tags":62},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=914957",[63,58,59],"Exploit",{"url":65,"source":56,"tags":66},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F03\u002Fmsg00020.html",[58,59],3,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2017-20002? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-20002, a high severity cyber security vulnerability from 2021. The Debian shadow package before 1:4.5-1 for Shadow incorre...","CVE-2017-20002, CVE-2017-20002 vulnerability, CVE-2017-20002 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, debian security, shadow vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-20002",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-20002","Cybersecurity","CVE-2017-20002, CVE-2017-20002 vulnerability, CVE-2017-20002 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":26,"Negate":26,"Nodes":107},[108],{"Operator":109,"Negate":26,"CPEMatch":110},"OR",[111,113],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C1317D10-D7BA-4A18-8667-7542A44A4989",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":118,"version":32},1793215804445,{"score":120,"band":121,"action":122,"scoredAt":123},48,"Medium","Plan remediation","2026-10-28T06:50:33.705967+00:00"]