Lucene search
+L

1660 matches found

Prion
Prion
•added 2022/03/10 5:42 p.m.•32 views

Design/Logic Flaw

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

5CVSS7.1AI score0.00704EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2022/03/08 2:07 p.m.•37 views

CVE-2021-3698

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

7.4AI score0.00704EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2022/03/08 2:07 p.m.•64 views

CVE-2021-3698

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

7.5CVSS7.3AI score0.00704EPSS
SaveExploits0
Mend
Mend
•added 2022/03/08 2:07 p.m.•6 views

CVE-2021-3698

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

8.7CVSS0.00704EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/08 12:00 a.m.•8 views

CVE-2021-3698: Improper Certificate Validation

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the...

7.5CVSS7AI score0.00704EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/03/08 12:00 a.m.•3 views

PT-2022-10608

Name of the Vulnerable Software and Affected Versions Cockpit versions prior to 260 Description A flaw was found in the way Cockpit handles certificate verification performed by the System Security Services Daemon SSSD, allowing client certificates to authenticate successfully regardless of the...

7.5CVSS0.00704EPSS
SaveExploits0References34
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2022-1148)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.8AI score0.02524EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2022-1097)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.8AI score0.02524EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/02/12 12:00 a.m.•33 views

EulerOS Virtualization 3.0.6.6 : sssd (EulerOS-SA-2022-1148)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire...

9.3CVSS6.6AI score0.02524EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/02/12 12:00 a.m.•21 views

EulerOS Virtualization 3.0.6.0 : sssd (EulerOS-SA-2022-1097)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire...

9.3CVSS6.6AI score0.02524EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•82 views

Rocky Linux 8 : sssd (RLSA-2021:3151)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3151 advisory. - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire subcommands. This flaw allows...

9.3CVSS6.6AI score0.02524EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•27 views

AlmaLinux 8 : sssd (ALSA-2021:3151)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:3151 advisory. - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire subcommands. This flaw allows a...

9.3CVSS6.6AI score0.02524EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2022/02/01 8:13 p.m.•21 views

sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

2AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2022/02/01 8:13 p.m.•28 views

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

7.1AI score
SaveExploits0
osv-alba
osv-alba
•added 2022/02/01 8:13 p.m.•9 views

ALBA-2022:0371 sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•5 views

PT-2022-1012

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description The System Security Services Daemon SSSD service manages access to remote directories and authentication mechanisms, providing the Name Service Switch NSS and the Pluggable Authentication Module...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2021-0287)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.04328EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•31 views

Mageia: Security Advisory (MGASA-2020-0205)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.03542EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•30 views

Mageia: Security Advisory (MGASA-2018-0350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01499EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2019-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.6AI score0.02821EPSS
SaveExploits0References6
Rows per page
Query Builder