{"id":"CVE-2022-26563","details":"An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.","modified":"2026-08-12T13:00:33.062388Z","published":"2023-07-18T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26563.json"},"references":[{"type":"WEB","url":"https://man7.org/linux/man-pages/man3/pam_acct_mgmt.3.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26563.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26563"},{"type":"FIX","url":"https://bitbucket.org/tildeslash/monit/commits/6ecaab1d375f33165fe98d06d92f36c949c0ea11"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://bitbucket.org/tildeslash/monit","events":[{"introduced":"0"},{"fixed":"8820e61fc46a6ac926d45a76e151c27b56f19380"},{"fixed":"6ecaab1d375f33165fe98d06d92f36c949c0ea11"}],"database_specific":{"cpe":"cpe:2.3:a:tildeslash:monit:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.31.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["release-5-31-0","release-5-30-0","release-5-29-0","release-5-28-1","release-5-28-0","release-5-27-2","release-5-27-1","release-5-27-0","release-5-26-0","release-5-25-3","release-5-25-2","release-5-25-1","release-5-25-0","release-5-24-0","release-5-23-0","release-5-20-0","release-5-19-0","release-5-18-0","release-5-17-1","release-5-17-0","release-5-16-0","release-5-15-0","release-5-14-0","release-5-13-0","release-5-12-2","release-5-12-1","release-5-12-0","release-5-11-0","release-5-8-1","release-5-8","release-5-7"],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:00:33Z","vanir_signatures":[{"source":"https://bitbucket.org/tildeslash/monit@6ecaab1d375f33165fe98d06d92f36c949c0ea11","target":{"file":"src/util.c"},"deprecated":false,"digest":{"line_hashes":["331168297561752226102267204412189674683","181868434140535734383861704323782969498","125843111526877862435972730749317177312","59566004903050237551622989984586804288","18648906668876949094318836248691963820","124052130359031075612308104356858303489"],"threshold":0.9},"id":"CVE-2022-26563-91ef866e","signature_type":"Line","signature_version":"v1"},{"source":"https://bitbucket.org/tildeslash/monit@6ecaab1d375f33165fe98d06d92f36c949c0ea11","target":{"file":"src/util.c","function":"PAMcheckPasswd"},"deprecated":false,"digest":{"function_hash":"250226565052614570592318414475633464608","length":469},"id":"CVE-2022-26563-fdac35b9","signature_type":"Function","signature_version":"v1"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-26563.json"}}],"schema_version":"1.9.0"}