The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libsss_sudoUpgrade libipa_hbacUpgrade libipa_hbac-pythonUpgrade libsss_idmap-develUpgrade libsss_sudo-develUpgrade sssdUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-toolsUpgrade libsss_idmapUpgrade libipa_hbac-devel | Dec 1, 2016 | Mar 21, 2013 |
| Oracle_linux | — | Upgrade libipa_hbac-develUpgrade libsss_sudoUpgrade libipa_hbacUpgrade libipa_hbac-pythonUpgrade libsss_idmap-develUpgrade sssdUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-clientUpgrade libsss_sudo-devel | Oct 16, 2024 | Mar 21, 2013 |
| Suse | — | Upgrade libipa_hbac0Upgrade python-ipa_hbacUpgrade sssd-toolsUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssd-32bitUpgrade sssd-ipa-providerUpgrade libsss_idmap0Upgrade python-sssd-configUpgrade libipa_hbac-develUpgrade sssd | Dec 12, 2013 | Mar 21, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub