VULNERABILITY INTELLIGENCE
CVE-2015-2704
CVSS score5 MEDIUM
EPSS probability2.54%
CISA KEVNot currently listed
Published2015-05-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response.
Weakness classification
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')