Red Hat Security AdvisoryRHSA-2017:2285
authconfig security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) authconfig-6.2.8-30.el7, authconfig-gtk-6.2.8-30.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) authconfig-6.2.8-30.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) authconfig-gtk-6.2.8-30.el7
- Red Hat Enterprise Linux Server (v. 7) authconfig-6.2.8-30.el7, authconfig-gtk-6.2.8-30.el7
- Red Hat Enterprise Linux Workstation (v. 7) authconfig-6.2.8-30.el7, authconfig-gtk-6.2.8-30.el7
Fixes 1 record
Priority LOW 23
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01445 · Published 2017-05-16 · Fixed CWE-200
