What’s Vulnerable › Vulnerabilities

CVE-2017-7488

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-16 · updated 2026-06-17
• Weakness: CWE-200

Description

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.

Affected products

• authconfig: 6.2.8

References

• http://www.securityfocus.com/bid/101784
• https://access.redhat.com/errata/RHSA-2017:2285
• https://bugzilla.redhat.com/show_bug.cgi?id=1441604
• https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master
• http://www.securityfocus.com/bid/101784
• https://access.redhat.com/errata/RHSA-2017:2285
• https://bugzilla.redhat.com/show_bug.cgi?id=1441604
• https://pagure.io/authconfig/c/0972f61ad4b5657ed89cf953e8f58f6513096224?branch=master

Get alerted when CVE-2017-7488 or the next vulnerability affects your stack