medium4.3
CVE-2017-7488
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information a…
Impact
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Authconfig Project | Authconfig | Version 6.2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101784
- https://access.redhat.com/errata/RHSA-2017:2285
- https://bugzilla.redhat.com/show_bug.cgi?id=1441604
- https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master
- http://www.securityfocus.com/bid/101784
- https://access.redhat.com/errata/RHSA-2017:2285
- https://bugzilla.redhat.com/show_bug.cgi?id=1441604
- https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master