According to the version of the ipa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that FreeIPA 4.2.0 and later could     disclose password hashes to users having the 'System:
    Read Stage Users' permission. A remote, authenticated     attacker could potentially use this flaw to disclose     the password hashes belonging to Stage Users. This     security issue does not result in disclosure of     password hashes belonging to active standard users.
    NOTE: some developers feel that this report is a     suggestion for a design change to Stage User     activation, not a statement of a     vulnerability.(CVE-2017-12169)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read     Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the     password hashes belonging to Stage Users. This security issue does not result in disclosure of password     hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for     a design change to Stage User activation, not a statement of a vulnerability. (CVE-2017-12169)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the version of the ipa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - It was found that FreeIPA 4.2.0 and later could     disclose password hashes to users having the 'System:
    Read Stage Users' permission. A remote, authenticated     attacker could potentially use this flaw to disclose     the password hashes belonging to Stage Users. This     security issue does not result in disclosure of     password hashes belonging to active standard users.
    NOTE: some developers feel that this report is a     suggestion for a design change to Stage User     activation, not a statement of a     vulnerability.(CVE-2017-12169)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已发现 FreeIPA 4.2.0 及更高版本可将密码哈希泄露给具有“System: Read Stage Users”权限的用户。经认证的远程攻击者可能利用此缺陷，泄露属于 Stage Users 的密码哈希。此安全问题不会导致属于活动标准用户的密码哈希泄露。注意：一些开发人员认为此报告是关于对阶段用户激活进行设计更改的建议，而不是漏洞的声明。 (CVE-2017-12169)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - FreeIPA 4.2.0 以降が、「System：Read Stage Users」権限を持つユーザーにパスワードハッシュを漏洩する可能性があることが判明しました。リモートの認証された攻撃者がこの欠陥を利用して、Stage Users に属するパスワードハッシュを漏えいする可能性があります。このセキュリティ問題は、アクティブな標準ユーザーに属するパスワードハッシュの漏洩を引き起こしません。注：一部の開発者は、このレポートが、脆弱性に関する記述ではなく、ステージユーザーのアクティベーションに対するデザイン変更の提案であると考えています。 （CVE-2017-12169）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 據發現，FreeIPA 4.2.0 和更新版本可能會向擁有「System: Read Stage Users」權限的使用者洩漏密碼雜湊。經驗證的遠端攻擊者可能利用此瑕疵，洩漏屬於 Stage Users 的密碼雜湊。此安全性問題不會導致屬於作用中標準使用者的密碼雜湊洩漏。注意：部分開發人員認為此報告是針對 Stage User 啟用的設計變更建議，而非弱點陳述。 (CVE-2017-12169)

請注意，Nessus 依賴供應商報告的套件存在。

ID	名稱	產品	系列	已發布	已更新	嚴重性
145159	EulerOS 2.0 SP3 : ipa (EulerOS-SA-2021-1075)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	high
220483	Linux Distros Unpatched Vulnerability : CVE-2017-12169	Nessus	Misc.	2025/3/4	2025/9/4	high
146193	EulerOS 2.0 SP5 : ipa (EulerOS-SA-2021-1196)	Nessus	Huawei Local Security Checks	2021/2/4	2024/1/23	high
147601	EulerOS Virtualization 3.0.6.6 : ipa (EulerOS-SA-2021-1484)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	high
220483	Linux Distros 未修补的漏洞: CVE-2017-12169	Nessus	Misc.	2025/3/4	2025/9/4	high
220483	Linux Distros のパッチ未適用の脆弱性: CVE-2017-12169	Nessus	Misc.	2025/3/4	2025/9/4	high
220483	Linux Distros 未修補弱點：CVE-2017-12169	Nessus	Misc.	2025/3/4	2025/9/4	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high