Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0249
HistoryJun 11, 2014 - 12:00 a.m.

CVE-2014-0249

2014-06-1100:00:00
ubuntu.com
ubuntu.com
6

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

The System Security Services Daemon (SSSD) 1.11.6 does not properly
identify group membership when a non-POSIX group is in a group membership
chain, which allows local users to bypass access restrictions via
unspecified vectors.

Bugs

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%