The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade sssd-krb5Upgrade python3-sss_nss_idmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssdUpgrade python3-ipa_hbacUpgrade libsss_simpleifp0Upgrade sssd-winbind-idmapUpgrade libipa_hbac0Upgrade libsss_nss_idmap0Upgrade sssd-ipaUpgrade libsss_simpleifp-develUpgrade libnfsidmap-sssUpgrade sssd-wbclient-develUpgrade libipa_hbac-develUpgrade libsss_idmap-develUpgrade sssd-ldapUpgrade sssd-wbclientUpgrade python-sssd-configUpgrade python3-sssd-configUpgrade libsss_certmap0Upgrade libsss_sudoUpgrade sssd-adUpgrade libsss_certmap-develUpgrade sssd-krb5-commonUpgrade sssd-32bitUpgrade libsss_sudo-develUpgrade sssd-dbusUpgrade sssd-kcmUpgrade python3-sss-murmurUpgrade libsss_nss_idmap-develUpgrade libsss_idmap0 | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub