The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sssd-clientUpgrade libipa_hbac-develUpgrade sssd-toolsUpgrade libsss_idmapUpgrade libsss_autofsUpgrade libipa_hbacUpgrade libsss_idmap-develUpgrade libipa_hbac-pythonUpgrade libsss_sudoUpgrade libsss_sudo-develUpgrade sssd | Dec 1, 2016 | Mar 21, 2013 |
| Oracle_linux | — | Upgrade libsss_idmapUpgrade libsss_sudo-develUpgrade sssdUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-toolsUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade libsss_idmap-develUpgrade libipa_hbac-pythonUpgrade libsss_sudo | Oct 16, 2024 | Mar 21, 2013 |
| Suse | — | Upgrade libipa_hbac0Upgrade libsss_idmap-develUpgrade sssd-toolsUpgrade libsss_sudoUpgrade python-ipa_hbacUpgrade libsss_idmap0Upgrade sssd-ipa-providerUpgrade python-sssd-configUpgrade libipa_hbac-develUpgrade sssd-32bitUpgrade sssd | Dec 12, 2013 | Mar 21, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub