CVE-2018-1113: redhat enterprise_linux_desktop Improper Authorization
Vulnerability summary
CVE-2018-1113 is a medium (CVSS 5.3) Improper Authorization vulnerability in redhat enterprise_linux_desktop. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23% of scored vulnerabilities.
Timeline
- 02-07-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
CVSS metrics
4 scores · 3 sources · 2 versions- CVE.orgCNA4.8MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LDiffers
- OSV · Red hatEcosystem advisory · calculated4.8MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LDiffers
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
-0.02 pp
From 0.33% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Affected systems
Redhat5 products
- enterprise_linux_desktop7.0
- enterprise_linux_server7.0
- enterprise_linux_workstation7.0
- setup< 2.11.4
- setup< 0:2.8.71-10.el7
[unknown]1 product
- setupsetup 2.11.4-1.fc28
2 vendors · 6 products
