Aller au contenu
Se connecter
3.8 Faible

CVE-2018-10852 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions,…

Description

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.

Produits et versions touchés

Produit Versions touchées Corrigé en
sssd Versions non publiées

Autres CVE de sssd

Les 3 CVE de sssd →
CVE-2018-16838 A flaw was found in sssd Group Policy Objects implementation 5.4 Moyenne CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the… 2.5 Faible
Suivre cette CVE