Aller au contenu
Se connecter
2.5 Faible

CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the…

Description

sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.

Produits et versions touchés

Produit Versions touchées Corrigé en
sssd 2.0.0 Pas de correctif indiqué

Autres CVE de sssd

Les 3 CVE de sssd →
CVE-2018-16838 A flaw was found in sssd Group Policy Objects implementation 5.4 Moyenne CVE-2018-10852 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions,… 3.8 Faible
Suivre cette CVE