Skip to content
Sign in
2.5 Low

CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the…

Description

sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.

Affected products and versions

Product Affected versions Fixed in
sssd 2.0.0 No fix stated

Other CVEs of sssd

The 3 CVEs of sssd →
CVE-2018-16838 A flaw was found in sssd Group Policy Objects implementation 5.4 Medium CVE-2018-10852 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions,… 3.8 Low
Track this CVE