CVE-2018-16883
sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2018-16883 sssd Corrigé dans: 2.2.0-1
- Ubuntu UBUNTU-CVE-2018-16883 sssd
Références
- advisory securityfocus.com
- report bugzilla.redhat.com