Auth bypass in [Unknown] Setup
CVE-2018-1113
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.
Affected products
- [Unknown] Setup — versions setup 2.11.4-1.fc28
- Fedoraproject Fedora
- Redhat Enterprise_linux
- Redhat Enterprise_linux_desktop — versions 7.0
- Redhat Enterprise_linux_server — versions 7.0
- Redhat Enterprise_linux_workstation — versions 7.0
- Redhat Setup
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-1113?
- CVE-2018-1113 is a medium-severity vulnerability in [Unknown] Setup, classified under Improper Authorization. CVSS score: 4.8/10. Published 2018-07-03.
- How severe is CVE-2018-1113?
- Medium severity. CVSS v3 base score is 4.8 out of 10.