Name: CVE-2017-7488: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2017-05-16T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-7488, CWE-200, CVSS 4.3, EPSS 0.01445

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.

CVSS Details

CVSS 3.0 Base Score: 4.3
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux	—	Upgrade authconfig	Sep 1, 2017	May 16, 2017
Centos_linux	—	Upgrade authconfig-gtkUpgrade authconfig-debuginfoUpgrade authconfig	Aug 28, 2019	May 16, 2017
Huawei Euleros 2_0_sp1	—	Upgrade authconfigUpgrade authconfig-gtk	Jan 18, 2018	May 16, 2017
Huawei Euleros 2_0_sp2	—	Upgrade authconfigUpgrade authconfig-gtk	Jan 18, 2018	May 16, 2017
Oracle_linux	—	Upgrade authconfigUpgrade authconfig-gtk	Aug 8, 2017	May 9, 2017
Redhat_linux	—	Upgrade authconfig-gtkUpgrade authconfigUpgrade authconfig-debuginfo	Aug 3, 2017	May 16, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence