This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')