CVE-2018-1113
Medium
Description
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
SeverityMedium
CVSS4.8
Exploit probability—
Product
Redhat Setup
PublishedJul 3, 2018
First seenJul 3, 2018
Weakness typeCWE-285CWE-285
How to fix
Update
- redhat setup2.11.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat setup | v < 2.11.4 | 2.11.4 |
| redhat enterprise_linux_desktop | 7.0 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.