A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-adUpgrade sssd-debuginfoUpgrade python-sssUpgrade libsss_certmap-develUpgrade libsss_simpleifp-develUpgrade sssd-kcmUpgrade sssd-winbind-idmapUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade libipa_hbac-develUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libipa_hbacUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade libsss_sudoUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-krb5Upgrade sssdUpgrade sssd-ldapUpgrade sssd-proxyUpgrade sssd-commonUpgrade sssd-client | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade sssd-proxyUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-commonUpgrade python3-sssdconfigUpgrade libipa_hbacUpgrade python3-libipa_hbacUpgrade sssd-common-debuginfoUpgrade sssd-winbind-idmapUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssd-krb5-common-debuginfoUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade python-libipa_hbacUpgrade sssd-ad-debuginfoUpgrade sssd-libwbclient-develUpgrade libsss_sudoUpgrade sssd-common-pac-debuginfoUpgrade sssd-tools-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-toolsUpgrade libsss_simpleifp-debuginfoUpgrade sssd-client-debuginfoUpgrade sssd-ipa-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade python3-libsss_nss_idmap-debuginfoUpgrade libsss_idmap-develUpgrade sssd-krb5-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-dbus-debuginfoUpgrade sssd-nfs-idmapUpgrade python3-sss-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade libsss_idmapUpgrade sssd-ipaUpgrade libsss_certmap-debuginfoUpgrade python-sssUpgrade sssd-debugsourceUpgrade libsss_sudo-debuginfoUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade sssd-proxy-debuginfoUpgrade python3-sss-murmurUpgrade sssdUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade sssd-polkit-rulesUpgrade libsss_certmap-develUpgrade python3-sssUpgrade sssd-dbusUpgrade libsss_nss_idmap-debuginfoUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade python3-libsss_nss_idmapUpgrade sssd-ldap-debuginfoUpgrade python-sss-murmurUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade python-libsss_nss_idmapUpgrade libsss_autofs-debuginfoUpgrade libsss_autofsUpgrade sssd-kcmUpgrade sssd-nfs-idmap-debuginfoUpgrade libipa_hbac-debuginfo | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libsss_nss_idmapUpgrade sssd-proxyUpgrade sssdUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-ldapUpgrade libsss_idmapUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-toolsUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-krb5Upgrade python-sssUpgrade libsss_nss_idmapUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-dbusUpgrade libsss_certmapUpgrade libsss_autofs | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsss_idmapUpgrade sssdUpgrade python-libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-toolsUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_autofsUpgrade sssd-proxyUpgrade sssd-commonUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade python-sssUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-dbusUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade sssd-adUpgrade libsss_sudo | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssdUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-ldapUpgrade libsss_certmapUpgrade libsss_sudoUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-adUpgrade libsss_nss_idmapUpgrade python-sssUpgrade python-sss-murmurUpgrade sssd-proxy | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade sssdUpgrade sssd-ipaUpgrade python3-libsss_nss_idmapUpgrade sssd-toolsUpgrade libsss_sudoUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade sssd-adUpgrade python3-libipa_hbacUpgrade python-sssdconfigUpgrade sssd-winbind-idmapUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-nfs-idmapUpgrade libsss_idmap-develUpgrade python3-sssUpgrade sssd-clientUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade sssd-libwbclient-develUpgrade sssd-commonUpgrade python-sss-murmurUpgrade sssd-kcmUpgrade libsss_certmapUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade libsss_nss_idmap-develUpgrade libsss_autofsUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade sssd-krb5Upgrade sssd-ldapUpgrade python3-sssdconfigUpgrade sssd-polkit-rulesUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-dbusUpgrade python3-sss-murmurUpgrade sssd-krb5-common | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade python3-sss-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade python-sss-murmurUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-debuginfoUpgrade python3-sssdconfigUpgrade sssd-libwbclient-debuginfoUpgrade python-sssdconfigUpgrade sssd-libwbclientUpgrade sssd-winbind-idmapUpgrade libsss_idmapUpgrade python3-libipa_hbacUpgrade libsss_idmap-develUpgrade sssd-client-debuginfoUpgrade libsss_sudoUpgrade sssd-dbus-debuginfoUpgrade sssd-krb5-commonUpgrade python3-libsss_nss_idmap-debuginfoUpgrade libipa_hbacUpgrade sssd-ipa-debuginfoUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-commonUpgrade sssd-toolsUpgrade libsss_simpleifp-develUpgrade python-libsss_nss_idmapUpgrade sssd-ad-debuginfoUpgrade libsss_autofsUpgrade libsss_certmap-debuginfoUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclient-develUpgrade sssd-dbusUpgrade sssd-krb5-debuginfoUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade python3-sss-murmur-debuginfoUpgrade python3-sssUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade python3-sss-murmurUpgrade libsss_simpleifp-debuginfoUpgrade sssd-kcm-debuginfoUpgrade libsss_idmap-debuginfoUpgrade python-sssUpgrade libsss_certmapUpgrade libsss_sudo-debuginfoUpgrade sssd-krb5Upgrade sssdUpgrade sssd-proxy-debuginfoUpgrade sssd-debugsourceUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-tools-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-nfs-idmapUpgrade sssd-common-debuginfoUpgrade python3-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssd-adUpgrade sssd-ldap-debuginfoUpgrade libipa_hbac-debuginfoUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-proxy | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade sssd-krb5Upgrade sssd-winbind-idmapUpgrade libsss_simpleifp0Upgrade python3-ipa_hbacUpgrade libsss_certmap0Upgrade sssd-proxyUpgrade python-sssd-configUpgrade sssd-dbusUpgrade sssd-toolsUpgrade python3-sss-murmurUpgrade libsss_nss_idmap0Upgrade python3-sss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade libsss_idmap-develUpgrade sssdUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade libnfsidmap-sssUpgrade libsss_simpleifp-develUpgrade libipa_hbac0Upgrade sssd-ipaUpgrade sssd-commonUpgrade sssd-wbclient-develUpgrade sssd-32bitUpgrade python3-sssd-configUpgrade sssd-wbclientUpgrade sssd-adUpgrade libsss_idmap0 | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub