Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-0249

Опубликовано: 11 июн. 2014
Источник: nvd
CVSS2: 3.3
EPSS Низкий

Описание

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fedoraproject:sssd:1.11.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00341
Низкий

3.3 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
около 12 лет назад

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

redhat
около 12 лет назад

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

debian
около 12 лет назад

The System Security Services Daemon (SSSD) 1.11.6 does not properly id ...

suse-cvrf
почти 10 лет назад

Security update for sssd

suse-cvrf
почти 10 лет назад

Security update for sssd

EPSS

Процентиль: 27%
0.00341
Низкий

3.3 Low

CVSS2

Дефекты

CWE-264