authconfig security, bug fix, and enhancement update

6.2.8-30 - do not use /usr and LIBDIR together 1455233 6.2.8-29 - update translations 1449625 6.2.8-28 - ignore PAMIGNORE for pamsucceedif so application do not fail in pamsetcred 1450425 6.2.8-27 - fix typo in the patch for CVE-2017-7488 1441604 6.2.8-26 - CVE-2017-7488 authconfig: Information...

RedHat Update for authconfig RHSA-2017:2285-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : authconfig (RHSA-2017:2285)

An update for authconfig is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

authconfig: Information leak when SSSD is used for authentication against remote server

A flaw was found where authconfig could configure sssd in a way that treats existing and non-existing logins differently, leaking information on existence of a user. An attacker with physical or network access to the machine could enumerate users via a timing attack...

Moderate: Red Hat Security Advisory: authconfig security, bug fix, and enhancement update

An update for authconfig is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Fedora 26 : authconfig (2017-1fe6f25af9)

New release fixing moderate information leak issue with PAM configuration when authentication to remote services via SSSD is enabled. To fix the incorrect configuration run: authconfig --updateall Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] Fedora 26 Update: authconfig-7.0.1-1.fc26

Authconfig is a command line utility which can configure a workstation to use shadow more secure passwords. Authconfig can also configure a system to be a client for certain networked user information and authentication schemes...

Authconfig Information Disclosure Vulnerability

Authconfig is a graphical and command line utility program. The program can provide basic client configuration for LDAP, Kerberos 5 and Winbind. An information disclosure vulnerability exists in Authconfig version 6.2.8. A remote attacker could exploit this vulnerability to disclose the existence...

Information disclosure

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2017-7488

CVE-2017-7488 affects Authconfig 6.2.8, where using SSSD to authenticate against a remote server can leak information about existing usernames. The issue is described across multiple advisories (Red Hat/CentOS Amazon Linux, MiracleLinux, EulerOS, NewStart CGSL) as an information exposure in the S...

CVE-2017-7488: Exposure of Sensitive Information to an Unauthorized Actor

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

PT-2017-17765 · Red Hat +1 · Authconfig +2

Name of the Vulnerable Software and Affected Versions: Authconfig version 6.2.8 Description: The issue concerns an information exposure when using SSSD to authenticate against a remote server, resulting in the leak of information about existing usernames. Recommendations: For Authconfig version...

CVE-2017-7488

A flaw was found where authconfig could configure sssd in a way that treats existing and non-existing logins differently, leaking information on existence of a user. An attacker with physical or network access to the machine could enumerate users via a timing attack. Mitigation Possible workaroun...

realmd security, bug fix, and enhancement update

0.16.1-5 - Revert 0.16.1-4 - Use samba by default - Resolves: rhbz1271618 0.16.1-4 - Fix regressions in 0.16.x releases - Resolves: rhbz1258745 - Resolves: rhbz1258488 0.16.1-3 - Fix regression accepting DNS domain names - Resolves: rhbz1243771 0.16.1-2 - Fix discarded patch: ipa-packages.patch...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the authconfig-4.1.19.2 package for the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Fedora 13 : pam-1.1.1-6.fc13 (2010-17112)

This update fixes moderate vulnerabilities in pamenv, pamnamespace, pammail, and pamxauth modules. Default configurations or configurations generated by authconfig are not affected by the pammail and pamnamespace vulnerabilities. Note that Tenable Network Security has extracted the preceding...