| Package | Affected versions | Patched versions |
|---|---|---|
| sssd | ≥ 1.13.0, < 2.0.0 | 2.0.0 |
sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free