CVE-2017-7488 Vulnerability Details

  /     /     /  

CVE-2017-7488 Metadata Quick Info

CVE Published: 16/05/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: redhat | Vendor: authconfig | Product: authconfig
Status : PUBLISHED

---

CVE-2017-7488 Description

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Information exposure
Source: authconfig

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).