Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has authconfig packages installed that are affected by a vulnerability:

  - Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against     remote server resulting in the leak of information about existing usernames. (CVE-2017-7488)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the authconfig packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found where authconfig could configure sssd     in a way that treats existing and non-existing logins     differently, leaking information on existence of a     user. An attacker with physical or network access to     the machine could enumerate users via a timing attack.
    (CVE-2017-7488)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Information leak when SSSD is used for authentication against remote server :

A flaw was found where authconfig could configure sssd in a way that treats existing and non-existing logins differently, leaking information on existence of a user. An attacker with physical or network access to the machine could enumerate users via a timing attack.(CVE-2017-7488)

An update for authconfig is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The authconfig packages contain a command-line utility and a GUI application that can configure a workstation to be a client for certain network user information, authentication schemes, and other user information and authentication-related options.

Security Fix(es) :

* A flaw was found where authconfig could configure sssd in a way that treats existing and non-existing logins differently, leaking information on existence of a user. An attacker with physical or network access to the machine could enumerate users via a timing attack. (CVE-2017-7488)

This issue was discovered by Tomas Mraz (Red Hat) and Thorsten Scherf (Red Hat).

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

Security Fix(es) :

  - A flaw was found where authconfig could configure sssd     in a way that treats existing and non-existing logins     differently, leaking information on existence of a user.
    An attacker with physical or network access to the     machine could enumerate users via a timing attack.
    (CVE-2017-7488)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2285 advisory.

    - fix typo in the patch for CVE-2017-7488 (#1441604)
    - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server     (#1441604)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New release fixing moderate (information leak) issue with PAM configuration when authentication to remote services via SSSD is enabled.

To fix the incorrect configuration run: authconfig --updateall

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
147327	NewStart CGSL CORE 5.04 / MAIN 5.04 : authconfig Vulnerability (NS-SA-2021-0048)	Nessus	NewStart CGSL Local Security Checks	medium
103034	EulerOS 2.0 SP2 : authconfig (EulerOS-SA-2017-1196)	Nessus	Huawei Local Security Checks	medium
103033	EulerOS 2.0 SP1 : authconfig (EulerOS-SA-2017-1195)	Nessus	Huawei Local Security Checks	medium
102863	Amazon Linux AMI : authconfig (ALAS-2017-875)	Nessus	Amazon Linux Local Security Checks	medium
102758	CentOS 7 : authconfig (CESA-2017:2285)	Nessus	CentOS Local Security Checks	medium
102637	Scientific Linux Security Update : authconfig on SL7.x x86_64 (20170801)	Nessus	Scientific Linux Local Security Checks	medium
102302	Oracle Linux 7 : authconfig (ELSA-2017-2285)	Nessus	Oracle Linux Local Security Checks	medium
102154	RHEL 7 : authconfig (RHSA-2017:2285)	Nessus	Red Hat Local Security Checks	medium
101586	Fedora 26 : authconfig (2017-1fe6f25af9)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2017-7488

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium