A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-clientUpgrade libsss_nss_idmap-develUpgrade libsss_certmapUpgrade sssd-commonUpgrade libsss_autofsUpgrade sssd-proxyUpgrade sssd-libwbclient-develUpgrade sssdUpgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade libsss_certmap-develUpgrade libsss_simpleifp-develUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade sssd-kcmUpgrade python-sssUpgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-adUpgrade sssd-debuginfoUpgrade sssd-winbind-idmapUpgrade libipa_hbac-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade sssd-tools-debuginfoUpgrade python3-sss-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-client-debuginfoUpgrade python3-libipa_hbacUpgrade sssd-nfs-idmapUpgrade sssd-krb5-common-debuginfoUpgrade sssd-krb5-debuginfoUpgrade sssd-commonUpgrade python3-sssdconfigUpgrade sssd-common-debuginfoUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-common-pac-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-libwbclient-develUpgrade libsss_simpleifpUpgrade python3-sss-murmur-debuginfoUpgrade sssd-toolsUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-adUpgrade libipa_hbacUpgrade python-libipa_hbacUpgrade sssd-proxyUpgrade sssd-ipa-debuginfoUpgrade sssd-winbind-idmapUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-kcm-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade libsss_idmapUpgrade sssd-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-dbus-debuginfoUpgrade sssd-ipaUpgrade libsss_autofsUpgrade sssd-debugsourceUpgrade libsss_nss_idmap-debuginfoUpgrade libipa_hbac-debuginfoUpgrade libsss_simpleifp-develUpgrade libsss_certmap-debuginfoUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_certmapUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libsss_certmap-develUpgrade sssdUpgrade sssd-ldap-debuginfoUpgrade sssd-kcmUpgrade python3-libsss_nss_idmapUpgrade python3-sssUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade python-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade python3-sss-murmurUpgrade libsss_sudo-debuginfoUpgrade python-sss-murmurUpgrade sssd-proxy-debuginfoUpgrade sssd-krb5-commonUpgrade python-sssUpgrade libsss_autofs-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade sssd-client | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libipa_hbacUpgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade python-sssUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-commonUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-toolsUpgrade sssd-adUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-proxyUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade sssdUpgrade libsss_simpleifpUpgrade sssd-ldapUpgrade sssd-krb5-common | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sss-murmurUpgrade sssd-common-pacUpgrade python-sssdconfigUpgrade sssd-adUpgrade python-sssUpgrade libipa_hbacUpgrade libsss_certmapUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-ldapUpgrade sssdUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade libsss_simpleifp | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-dbusUpgrade sssdUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-libwbclientUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade libipa_hbacUpgrade sssd-ipaUpgrade python-sssUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_sudoUpgrade libsss_simpleifp | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade sssd-kcmUpgrade sssd-polkit-rulesUpgrade python3-sss-murmurUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade libsss_simpleifp-develUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade sssd-libwbclient-develUpgrade sssd-libwbclientUpgrade python-sssUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade python3-sssUpgrade libsss_certmap-develUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade python3-sssdconfigUpgrade libsss_certmapUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade sssd-adUpgrade python-sssdconfigUpgrade libsss_idmap-develUpgrade python3-libsss_nss_idmapUpgrade sssdUpgrade libsss_sudoUpgrade sssd-proxyUpgrade sssd-ipaUpgrade libsss_nss_idmapUpgrade libsss_simpleifpUpgrade python3-libipa_hbacUpgrade libsss_idmapUpgrade sssd-nfs-idmapUpgrade sssd-winbind-idmap | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssd-toolsUpgrade python3-sssdconfigUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-libwbclient-develUpgrade sssd-libwbclient-debuginfoUpgrade python-sssdconfigUpgrade sssd-commonUpgrade sssd-dbus-debuginfoUpgrade python3-libipa_hbacUpgrade sssd-client-debuginfoUpgrade python-libipa_hbacUpgrade libsss_certmap-debuginfoUpgrade python-libsss_nss_idmapUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-krb5-debuginfoUpgrade libsss_idmap-develUpgrade sssd-ad-debuginfoUpgrade python3-libsss_nss_idmap-debuginfoUpgrade libsss_autofsUpgrade python3-sssUpgrade libsss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade sssd-debuginfoUpgrade sssd-nfs-idmap-debuginfoUpgrade python-sss-murmurUpgrade python3-sss-murmur-debuginfoUpgrade python3-sss-murmurUpgrade libsss_simpleifp-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-ipaUpgrade sssd-ipa-debuginfoUpgrade sssd-clientUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-common-pac-debuginfoUpgrade libsss_simpleifp-develUpgrade sssd-common-pacUpgrade sssd-kcmUpgrade sssd-krb5-common-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-nfs-idmapUpgrade libsss_certmap-develUpgrade python3-libsss_nss_idmapUpgrade sssd-ldap-debuginfoUpgrade sssd-krb5Upgrade sssd-common-debuginfoUpgrade sssd-proxy-debuginfoUpgrade libsss_certmapUpgrade libipa_hbac-debuginfoUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssd-adUpgrade sssd-tools-debuginfoUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade sssd-debugsourceUpgrade python-sssUpgrade libsss_simpleifpUpgrade sssdUpgrade libsss_sudo-debuginfoUpgrade python3-libipa_hbac-debuginfo | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade sssd-ipaUpgrade libipa_hbac0Upgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade sssd-wbclient-develUpgrade sssd-adUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade sssdUpgrade libsss_idmap-develUpgrade libnfsidmap-sssUpgrade libipa_hbac-develUpgrade sssd-ldapUpgrade python3-sssd-configUpgrade libsss_idmap0Upgrade sssd-32bitUpgrade sssd-wbclientUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade python3-sss_nss_idmapUpgrade python3-sss-murmurUpgrade libsss_simpleifp0Upgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade python3-ipa_hbacUpgrade libsss_certmap0Upgrade sssd-proxyUpgrade python-sssd-configUpgrade libsss_nss_idmap0 | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub