A malicious unauthorized PAM user can access the administration configuration data and change the values.
NVD-CWE-noinfo