Lucene search
PRIOn knowledge basePRION:CVE-2018-16838HistoryMar 25, 2019 - 6:29 p.m.
Design/Logic Flaw
2019-03-2518:29:00
PRIOn knowledge base
www.prio-n.com
2
A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
| CPE | Name | Operator | Version |
|---|---|---|---|
| enterprise_linux | eq | 7.0 |
References
lists.opensuse.org/opensuse-security-announce/2019-06/msg00042.html
lists.opensuse.org/opensuse-security-announce/2019-06/msg00051.html
access.redhat.com/errata/RHSA-2019:2177
access.redhat.com/errata/RHSA-2019:2437
access.redhat.com/errata/RHSA-2019:3651
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16838
lists.debian.org/debian-lts-announce/2023/05/msg00028.html
Related
openvas
openvas
openSUSE: Security Advisory for sssd (openSUSE-SU-2019:1589-1)
2019-06-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1477-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2020-1453)
2020-04-16 00:00:00
nessus
nessus
RHEL 8 : sssd (RHSA-2019:3651)
2019-11-06 00:00:00
EulerOS 2.0 SP5 : sssd (EulerOS-SA-2019-2190)
2019-11-08 00:00:00
EulerOS 2.0 SP2 : sssd (EulerOS-SA-2019-2517)
2019-12-04 00:00:00
nvd
nvd
CVE-2018-16838
2019-03-25 18:29:00
redhat
redhat
(RHSA-2019:3651) Low: sssd security, bug fix, and enhancement update
2019-11-05 18:11:07
(RHSA-2019:2177) Moderate: sssd security, bug fix, and enhancement update
2019-08-06 08:10:08
(RHSA-2019:2437) Important: Red Hat Virtualization security update
2019-08-12 10:51:59
cve
cve
CVE-2018-16838
2019-03-25 18:29:00
redhatcve
redhatcve
CVE-2018-16838
2019-02-04 09:20:11
debiancve
debiancve
CVE-2018-16838
2019-03-25 18:29:00
suse
suse
Security update for sssd (moderate)
2019-06-18 00:00:00
Security update for sssd (moderate)
2019-06-19 00:00:00
veracode
veracode
Improper Access Restriction
2019-08-08 00:07:55
oraclelinux
oraclelinux
sssd security, bug fix, and enhancement update
2019-11-14 00:00:00
sssd security, bug fix, and enhancement update
2019-08-13 00:00:00
cvelist
cvelist
CVE-2018-16838
2019-03-25 17:41:18
mageia
mageia
Updated sssd packages fix security vulnerability
2019-12-19 16:44:26
ubuntucve
ubuntucve
CVE-2018-16838
2019-03-25 00:00:00
amazon
amazon
Medium: sssd
2019-10-08 21:07:00
Medium: sssd
2019-10-28 17:45:00
centos
centos
debian
debian
[SECURITY] [DLA 3436-1] sssd security update
2023-05-29 13:43:53
osv
osv
sssd - security update
2023-05-29 00:00:00
sssd vulnerabilities
2021-09-08 11:40:23
ubuntu
ubuntu
SSSD vulnerabilities
2021-09-08 00:00:00