{"schema":"vulnpedia.research/1","cve":"CVE-2015-3246","references":[{"url":"http://www.securityfocus.com/bid/76022","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://www.securityfocus.com/bid/76022"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://www.securityfocus.com/bid/76022"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://www.securityfocus.com/bid/76022"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"}]},{"url":"https://www.exploit-db.com/exploits/44633/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://www.exploit-db.com/exploits/44633/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"https://www.exploit-db.com/exploits/44633/"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"https://www.exploit-db.com/exploits/44633/"}]},{"url":"https://access.redhat.com/articles/1537873","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://access.redhat.com/articles/1537873"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"https://access.redhat.com/articles/1537873"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"https://access.redhat.com/articles/1537873"},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://access.redhat.com/articles/1537873"}]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"}]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html"}]},{"url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt","tags":["x_refsource_MISC","x_transferred","Exploit"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"}]},{"url":"http://www.securitytracker.com/id/1033040","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://www.securitytracker.com/id/1033040"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://www.securitytracker.com/id/1033040"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://www.securitytracker.com/id/1033040"}]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.107Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"}]},{"url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/","tags":["third-party-advisory","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:02:50.537Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:02:50.537Z","url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"},{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:02:50.537Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:02:50.537Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246"},{"source":"nvd","sourceId":"CVE-2015-3246","modified":"2026-10-02T11:33:29.473","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3246","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://access.redhat.com/security/cve/CVE-2015-3246"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233052","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233052"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3246","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2015-3246"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3246","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3246"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2015:1482","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://access.redhat.com/errata/RHSA-2015:1482"}]},{"url":"https://access.redhat.com/errata/RHSA-2015:1483","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://access.redhat.com/errata/RHSA-2015:1483"}]},{"source":"euvd","sourceId":"EUVD-2015-3301","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3301","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2015-3301","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3301"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2015-3246","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://previdian.com/CVE-2015-3246"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2015-3246","source":"poc-in-github","sourceId":"CVE-2015-3246","description":"CVE-2015-3246","modified":"2026-08-27T09:31:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3246","url":"https://github.com/HORKimhab/CVE-2015-3246"},{"source":"poc-in-github","sourceId":"CVE-2015-3246","modified":"2026-08-27T09:31:22Z","url":"https://github.com/HORKimhab/CVE-2015-3246"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb","source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","description":"Libuser roothelper Privilege Escalation","modified":"2026-04-22 11:57:34 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb"},{"source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","modified":"2026-04-22 11:57:34 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb"}],"tags":[]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Client-6.7.z:libuser-0:0.56.13-8.el6_7.i686","product":"libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Client-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Client-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6ComputeNode-6.7.z:libuser-0:0.56.13-8.el6_7.src","product":"libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6ComputeNode-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686","product":"libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-6.7.z:libuser-0:0.56.13-8.el6_7.i686","product":"libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-6.7.z:libuser-0:0.56.13-8.el6_7.s390x","product":"libuser-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc","product":"libuser-debuginfo-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=ppc","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-6.7.z:libuser-python-0:0.56.13-8.el6_7.x86_64","product":"libuser-python-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390","product":"libuser-debuginfo-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Server-optional-6.7.z:libuser-devel-0:0.56.13-8.el6_7.ppc","product":"libuser-devel-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.56.13-8.el6_7?arch=ppc","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Workstation-6.7.z:libuser-0:0.56.13-8.el6_7.i686","product":"libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Workstation-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"6Workstation-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Client-7.1.Z:libuser-0:0.60-7.el7_1.src","product":"libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux Client (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Client-7.1.Z:libuser-python-0:0.60-7.el7_1.x86_64","product":"libuser-python-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Client-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.x86_64","product":"libuser-devel-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7ComputeNode-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.i686","product":"libuser-debuginfo-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7ComputeNode-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.i686","product":"libuser-devel-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-7.1.Z:libuser-0:0.60-7.el7_1.ppc64","product":"libuser-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-7.1.Z:libuser-0:0.60-7.el7_1.x86_64","product":"libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.s390","product":"libuser-debuginfo-0:0.60-7.el7_1.s390 as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-7.1.Z:libuser-python-0:0.60-7.el7_1.s390x","product":"libuser-python-0:0.60-7.el7_1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-LE-7.1.Z:libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le","product":"libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.ael7b_1?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-optional-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.ppc64","product":"libuser-debuginfo-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.i686","product":"libuser-devel-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Server-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.x86_64","product":"libuser-devel-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Workstation-7.1.Z:libuser-0:0.60-7.el7_1.src","product":"libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Workstation-7.1.Z:libuser-python-0:0.60-7.el7_1.x86_64","product":"libuser-python-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"7Workstation-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.x86_64","product":"libuser-devel-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]},{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json","productId":"red_hat_enterprise_linux_5:libuser.src","product":"libuser.src as a component of Red Hat Enterprise Linux 5","status":"known_affected","remediations":[{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfter these changes, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/libuser?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3246","modified":"2026-08-27T02:00:13+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3246.json"}]}],"vendorCoverage":{"total":126,"shown":32,"omitted":94,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-20T00:00:00Z","modified":"2026-08-20T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Red Hat","product":"Libuser","dueDate":"2026-09-09T00:00:00Z","cisaDateAdded":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","modified":"2026-08-20T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/","dateAdded":"2026-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2015-3246","dateAdded":"2026-08-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","url":"https://previdian.com/CVE-2015-3246"},{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3246","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}