The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libipa_hbacUpgrade libsss_sudo-develUpgrade libsss_idmap-develUpgrade libipa_hbac-pythonUpgrade sssdUpgrade libsss_sudoUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-toolsUpgrade libsss_autofs | Dec 1, 2016 | Mar 21, 2013 |
| Oracle_linux | — | Upgrade libipa_hbac-pythonUpgrade libipa_hbacUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade libsss_sudo-develUpgrade libsss_autofsUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd | Oct 16, 2024 | Mar 21, 2013 |
| Suse | — | Upgrade python-ipa_hbacUpgrade libipa_hbac0Upgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-ipa-providerUpgrade python-sssd-configUpgrade sssdUpgrade libipa_hbac-develUpgrade sssd-32bitUpgrade libsss_idmap0 | Dec 12, 2013 | Mar 21, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub