Lucene search
Redhat.comRH:CVE-2018-10852HistoryJun 26, 2018 - 3:18 a.m.
CVE-2018-10852
2018-06-2603:18:41
redhat.com
access.redhat.com
16
EPSS
0.003
Percentile
66.4%
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user.
Related
suse
suse
Security update for sssd (moderate)
2018-08-10 03:11:29
Security update for sssd (moderate)
2019-01-14 00:00:00
oraclelinux
oraclelinux
sssd security, bug fix, and enhancement update
2018-11-05 00:00:00
nessus
nessus
Scientific Linux Security Update : sssd on SL7.x x86_64 (20181030)
2018-11-27 00:00:00
SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0081-1)
2019-01-14 00:00:00
openSUSE Security Update : sssd (openSUSE-2019-574)
2019-03-27 00:00:00
openvas
openvas
openSUSE: Security Advisory for sssd (openSUSE-SU-2019:0051-1)
2019-01-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2144-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2018-0350)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2018-10852
2018-06-26 00:00:00
debiancve
debiancve
CVE-2018-10852
2018-06-26 14:29:02
centos
centos
osv
osv
sssd - security update
2018-07-16 00:00:00
libipa_hbac-devel-2.5.2-1.4 on GA media
2024-06-15 00:00:00
sssd vulnerabilities
2021-09-08 11:40:23
prion
prion
Code injection
2018-06-26 14:29:00
nvd
nvd
CVE-2018-10852
2018-06-26 14:29:02
redhat
redhat
(RHSA-2018:3158) Low: sssd security, bug fix, and enhancement update
2018-10-30 04:24:36
cvelist
cvelist
CVE-2018-10852
2018-06-26 14:00:00
cve
cve
CVE-2018-10852
2018-06-26 14:29:02
debian
debian
[SECURITY] [DLA 1429-1] sssd security update
2018-07-16 10:09:58
mageia
mageia
Updated sssd packages fix security vulnerability
2018-08-24 02:35:07
veracode
veracode
Information Disclosure
2019-01-15 09:26:43
ubuntu
ubuntu
SSSD vulnerabilities
2021-09-08 00:00:00