The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sssd-toolsUpgrade libsss_idmapUpgrade libsss_autofsUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade libsss_sudo-develUpgrade libsss_idmap-develUpgrade libipa_hbacUpgrade sssdUpgrade libipa_hbac-pythonUpgrade libsss_sudo | Dec 1, 2016 | Mar 21, 2013 |
| Oracle_linux | — | Upgrade libipa_hbacUpgrade libipa_hbac-develUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade libipa_hbac-pythonUpgrade libsss_idmapUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libsss_sudo-develUpgrade sssd-clientUpgrade sssd | Oct 16, 2024 | Mar 21, 2013 |
| Suse | — | Upgrade libsss_idmap-develUpgrade libipa_hbac0Upgrade python-ipa_hbacUpgrade sssd-toolsUpgrade libsss_sudoUpgrade libipa_hbac-develUpgrade sssdUpgrade sssd-32bitUpgrade libsss_idmap0Upgrade sssd-ipa-providerUpgrade python-sssd-config | Dec 12, 2013 | Mar 21, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub