Red Hat Linux, CentOS, Oracle Linux, SUSE Linux, Ubuntu
Service
Centrify Infrastructure Services
000011514
Does CVE-2018-19788 affect Centrify
Description for CVE-2018-19788 : This issue affects the versions of polkit as shipped with Red Hat Virtualization 4. System users beyond those created at installation time are typically not used in Red Hat Virtualization Hypervisor or Management Appliance hosts, nor is there any opportunity to accidentally or maliciously create a user with a dangerous uid/gid on these systems under normal operation. For Red Hat Virtualization, this vulnerability has been rated as having a security impact of Low. Future updates may address this issue.
For more details, please check the related link below. https://access.redhat.com/security/cve/cve-2018-19788
Question: Does CVE-2018-19788 affect Centrify?
Answer:
Centrify Linux Agents are applications on the given OS. Centrify Linux Agent is the victim of this CVE as are all applications running on the affected OS. Centrify does not open such exposure as outlined in this CVE, It is the OS that is breached, so the Centrify Linux agent suffers the same consequence. Centrify does not own PolicyKit, and as such the fix will have to come from the OS vendor.
Please reach out to OS vendor for the further assistance on security patch policy.