A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_certmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssdUpgrade sssd-commonUpgrade sssd-libwbclient-develUpgrade libsss_sudoUpgrade sssd-common-pacUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade libsss_idmap-develUpgrade sssd-ipaUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade python-sssUpgrade libsss_certmap-develUpgrade sssd-winbind-idmapUpgrade libsss_simpleifp-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade python-sssdconfigUpgrade sssd-libwbclient-debuginfoUpgrade sssd-proxyUpgrade sssd-libwbclient-develUpgrade sssd-kcm-debuginfoUpgrade sssd-ad-debuginfoUpgrade python3-sssdconfigUpgrade python3-libipa_hbac-debuginfoUpgrade python3-libipa_hbacUpgrade sssd-commonUpgrade sssd-adUpgrade sssd-krb5-common-debuginfoUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade python3-libsss_nss_idmap-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-toolsUpgrade sssd-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-krb5-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade libsss_idmap-develUpgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-dbus-debuginfoUpgrade sssd-ipa-debuginfoUpgrade sssd-common-debuginfoUpgrade libsss_simpleifpUpgrade sssd-client-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-nfs-idmapUpgrade sssd-debugsourceUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade sssd-clientUpgrade libsss_certmapUpgrade libsss_autofs-debuginfoUpgrade libsss_nss_idmap-develUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade libipa_hbac-debuginfoUpgrade sssdUpgrade libipa_hbac-develUpgrade python-libsss_nss_idmapUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_certmap-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-kcmUpgrade python3-sssUpgrade sssd-ldap-debuginfoUpgrade python3-libsss_nss_idmapUpgrade python-sss-murmurUpgrade libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade libsss_certmap-develUpgrade python-sssUpgrade sssd-krb5Upgrade sssd-libwbclientUpgrade python3-sss-murmurUpgrade libsss_sudo-debuginfoUpgrade sssd-polkit-rules | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-proxyUpgrade sssd-ipaUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade sssdUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-toolsUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade libsss_simpleifpUpgrade python-sssUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade libipa_hbacUpgrade sssd-dbusUpgrade libsss_certmapUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade libsss_autofs | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-krb5Upgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade sssdUpgrade sssd-ldapUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-proxyUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade sssd-dbusUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade python-sssdconfigUpgrade python-sssUpgrade sssd-krb5-commonUpgrade sssd-ad | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-dbusUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-common-pacUpgrade sssdUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-ldapUpgrade libsss_certmapUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade python-sssUpgrade libsss_idmapUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-adUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade libipa_hbacUpgrade python-sssdconfig | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade sssd-common-pacUpgrade sssd-polkit-rulesUpgrade python3-sss-murmurUpgrade python3-sssdconfigUpgrade sssd-krb5Upgrade libsss_certmap-develUpgrade sssd-dbusUpgrade sssd-ldapUpgrade libsss_certmapUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade libsss_simpleifp-develUpgrade sssd-kcmUpgrade libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade python-libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-krb5-commonUpgrade sssd-clientUpgrade python3-sssUpgrade python-sssUpgrade python3-libipa_hbacUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade python3-libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-toolsUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade sssd-nfs-idmapUpgrade sssdUpgrade python-sssdconfigUpgrade sssd-winbind-idmap | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-proxy-debuginfoUpgrade python3-libsss_nss_idmapUpgrade sssd-common-debuginfoUpgrade libsss_certmapUpgrade sssd-ldap-debuginfoUpgrade sssd-krb5Upgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_certmap-develUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssd-nfs-idmapUpgrade libsss_autofs-debuginfoUpgrade python-sssUpgrade sssd-tools-debuginfoUpgrade sssd-debugsourceUpgrade libipa_hbac-debuginfoUpgrade libsss_sudo-debuginfoUpgrade sssd-ipaUpgrade sssd-client-debuginfoUpgrade sssd-kcm-debuginfoUpgrade python-sss-murmurUpgrade libsss_certmap-debuginfoUpgrade libsss_idmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade sssd-krb5-debuginfoUpgrade sssd-toolsUpgrade python3-sss-murmurUpgrade python3-sss-murmur-debuginfoUpgrade python-sssdconfigUpgrade sssd-commonUpgrade python3-libipa_hbacUpgrade sssd-dbus-debuginfoUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-ipa-debuginfoUpgrade libsss_sudoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-dbusUpgrade libsss_simpleifp-debuginfoUpgrade sssd-ad-debuginfoUpgrade libsss_idmapUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-common-pacUpgrade python3-sssUpgrade python3-sssdconfigUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade python3-libsss_nss_idmap-debuginfoUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade python3-sss-debuginfoUpgrade libsss_idmap-debuginfoUpgrade libipa_hbac-develUpgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade libsss_simpleifp-develUpgrade sssd-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-kcm | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade python3-ipa_hbacUpgrade python3-sss-murmurUpgrade sssd-dbusUpgrade python3-sss_nss_idmapUpgrade sssd-proxyUpgrade libsss_certmap0Upgrade python-sssd-configUpgrade libsss_simpleifp0Upgrade sssd-toolsUpgrade libsss_nss_idmap0Upgrade sssd-winbind-idmapUpgrade sssd-krb5Upgrade libipa_hbac0Upgrade libipa_hbac-develUpgrade sssdUpgrade libsss_idmap0Upgrade libsss_nss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-wbclient-develUpgrade sssd-krb5-commonUpgrade libsss_certmap-develUpgrade sssd-ldapUpgrade libsss_idmap-develUpgrade sssd-commonUpgrade libnfsidmap-sssUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-32bitUpgrade python3-sssd-configUpgrade sssd-wbclientUpgrade sssd-ad | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub