SSSD 'sysdb_search_user_by_upn_res()' Local Information Disclosure Vulnerability
BID:103197
Info
SSSD 'sysdb_search_user_by_upn_res()' Local Information Disclosure Vulnerability
| Bugtraq ID: | 103197 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-12173 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 10 2017 12:00AM |
| Updated: | Mar 10 2017 12:00AM |
| Credit: | Sumit Bose (Red Hat). |
| Vulnerable: |
Redhat Satellite 6 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Server - TUS 7.4 Redhat Enterprise Linux Server - Extended Update Support 7.4 Redhat Enterprise Linux Server - AUS 7.4 Redhat Enterprise Linux Server - 4 Year Extended Update Support 7.4 Redhat Enterprise Linux Server (for IBM Power LE) - 4 Year Extended Update Support 7.4 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux for Scientific Computing 7 Redhat Enterprise Linux for Power, little endian - Extended Update Supp 7.4 Redhat Enterprise Linux for Power, little endian 7 Redhat Enterprise Linux for Power, big endian - Extended Update Support 7.4 Redhat Enterprise Linux for Power, big endian 7 Redhat Enterprise Linux for Power 9 Redhat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 Redhat Enterprise Linux for IBM z Systems 7 Redhat Enterprise Linux for ARM 64 7 Redhat Enterprise Linux EUS Compute Node 7.4 Redhat Enterprise Linux Desktop 7 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 Fedoraproject Sssd 1.15 Fedoraproject Sssd 1.13 Fedoraproject Sssd 1.11.6 Fedoraproject Sssd 1.9.3 Fedoraproject Sssd 1.5.17 Fedoraproject Sssd 1.5.15 Fedoraproject Sssd 1.5.12 Fedoraproject Sssd 1.5.11 Fedoraproject Sssd 1.0.99 Fedoraproject Sssd 0.99.1 Fedoraproject Sssd 0.3.3 Fedoraproject Sssd 1.9.4 Fedoraproject Sssd 1.9.2 Fedoraproject Sssd 1.9.1 Fedoraproject Sssd 1.9.0 Fedoraproject Sssd 1.8.6 Fedoraproject Sssd 1.8.5 Fedoraproject Sssd 1.8.4 Fedoraproject Sssd 1.8.3 Fedoraproject Sssd 1.8.2 Fedoraproject Sssd 1.8.1 Fedoraproject Sssd 1.8.0 Fedoraproject Sssd 1.7.0 Fedoraproject Sssd 1.6.4 Fedoraproject Sssd 1.6.3 Fedoraproject Sssd 1.6.2 Fedoraproject Sssd 1.6.1 Fedoraproject Sssd 1.6.0 Fedoraproject Sssd 1.5.9 Fedoraproject Sssd 1.5.8 Fedoraproject Sssd 1.5.7 Fedoraproject Sssd 1.5.6.1 Fedoraproject Sssd 1.5.6 Fedoraproject Sssd 1.5.5 Fedoraproject Sssd 1.5.4 Fedoraproject Sssd 1.5.3 Fedoraproject Sssd 1.5.2 Fedoraproject Sssd 1.5.16 Fedoraproject Sssd 1.5.14 Fedoraproject Sssd 1.5.13 Fedoraproject Sssd 1.5.10 Fedoraproject Sssd 1.5.1 Fedoraproject Sssd 1.5.0 Fedoraproject Sssd 1.4.1 Fedoraproject Sssd 1.4.0 Fedoraproject Sssd 1.3.1 Fedoraproject Sssd 1.3.0 Fedoraproject Sssd 1.2.91 Fedoraproject Sssd 1.2.4 Fedoraproject Sssd 1.2.3 Fedoraproject Sssd 1.2.2 Fedoraproject Sssd 1.2.1 Fedoraproject Sssd 1.2.0 Fedoraproject Sssd 1.1.92 Fedoraproject Sssd 1.1.91 Fedoraproject Sssd 1.1.2 Fedoraproject Sssd 1.1.1 Fedoraproject Sssd 1.1.0 Fedoraproject Sssd 1.0.6 Fedoraproject Sssd 1.0.5 Fedoraproject Sssd 1.0.4 Fedoraproject Sssd 1.0.3 Fedoraproject Sssd 1.0.2 Fedoraproject Sssd 1.0.1 Fedoraproject Sssd 1.0.0 Fedoraproject Sssd 0.99.0 Fedoraproject Sssd 0.7.1 Fedoraproject Sssd 0.7.0 Fedoraproject Sssd 0.6.1 Fedoraproject Sssd 0.6.0 Fedoraproject Sssd 0.5.0 Fedoraproject Sssd 0.4.1 Fedoraproject Sssd 0.4.0 Fedoraproject Sssd 0.3.2 Fedoraproject Sssd 0.3.1 Fedoraproject Sssd 0.3.0 Fedoraproject Sssd 0.2.1 |
| Not Vulnerable: |
Fedoraproject Sssd 1.16 |
Discussion
SSSD 'sysdb_search_user_by_upn_res()' Local Information Disclosure Vulnerability
SSSD is prone to local information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
Versions prior to SSSD 1.16.0 are vulnerable.
SSSD is prone to local information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
Versions prior to SSSD 1.16.0 are vulnerable.