Skip to content
Sign in
3.8 Low

CVE-2018-10852 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions,…

Description

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.

Affected products and versions

Product Affected versions Fixed in
sssd Versions not published

Other CVEs of sssd

The 3 CVEs of sssd →
CVE-2018-16838 A flaw was found in sssd Group Policy Objects implementation 5.4 Medium CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the… 2.5 Low
Track this CVE