Advisory ROSA-SA-2021-1977

Software: sssd 1.16.5 OS: Cobalt 7.9 CVE-ID: CVE-2018-16883 CVE-Crit: MEDIUM CVE-DESC: sssd versions 1.13.0 through 2.0.0 incorrectly restricted access to the information channel according to the "alloweduids" configuration parameter. If sensitive information was stored in a user's directory, it...

PT-2018-13779

Name of the Vulnerable Software and Affected Versions sssd versions 1.13.0 through 1.99.99 since 2.0.0 is the first version not affected, it implies versions before 2.0.0 are vulnerable Description The issue concerns improper restriction of access to the infopipe based on the allowed uids...