CVE-2012-3462

Опубликовано: 26 дек. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context.

Ссылки

https://access.redhat.com/security/cve/cve-2012-3462
Broken Link
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3462
Exploit
Issue Tracking
Patch
https://pagure.io/SSSD/sssd/issue/1470
Exploit
Issue Tracking
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-3462
Broken Link
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3462
Exploit
Issue Tracking
Patch
https://pagure.io/SSSD/sssd/issue/1470
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.01607

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2012-3462

CVSS3: 8.8

ubuntu

больше 6 лет назад

CVE-2012-3462

CVSS3: 8.8

debian

больше 6 лет назад

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider log ...

GHSA-h73j-5p58-29r6

CVSS3: 8.8

github

больше 4 лет назад

EPSS

Процентиль: 74%

0.01607

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287