CVE-2018-16883
sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If...
Original description
The description as published by the source.
sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-16883 sssd Fixed in: 2.2.0-1
- Ubuntu UBUNTU-CVE-2018-16883 sssd
References
- advisory securityfocus.com
- report bugzilla.redhat.com