CVE-2017-7488 Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| authconfig project authconfig | = 6.2.8 | No fix listed |
| authconfig | = 6.2.8 | No fix listed |
References
- 101784 vdb-entry
- RHSA-2017:2285 vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry
- pagure.io patch third-party-advisory