漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Improper Permission Management in SSH Session Handling
Vulnerability Description
A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Authd 安全漏洞
Vulnerability Description
Authd是Ubuntu开源的一个基于云的身份提供者的身份验证守护进程。 Authd 0.5.4之前版本存在安全漏洞,该漏洞源于临时用户记录问题,可能导致用户被错误识别为root组。
CVSS Information
N/A
Vulnerability Type
N/A