[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256040

 
 

909

 
 

199103

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2017-875 ---- authconfig

ID: oval:org.secpod.oval:def:1600753Date: (C)2020-11-27   (M)2023-02-20
Class: PATCHFamily: unix




Information leak when SSSD is used for authentication against remote server:A flaw was found where authconfig could configure sssd in a way that treats existing and non-existing logins differently, leaking information on existence of a user. An attacker with physical or network access to the machine could enumerate users via a timing attack.

Platform:
Amazon Linux AMI
Product:
authconfig
Reference:
ALAS-2017-875
CVE-2017-7488
CVE    1
CVE-2017-7488
CPE    2
cpe:/o:amazon:linux
cpe:/a:authconfig_project:authconfig

© SecPod Technologies