CVE-2018-10852

CVE-2018-10852

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.

Source: CVE-2018-10852

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다