A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsss_certmap-develUpgrade sssd-kcmUpgrade sssd-ipaUpgrade libipa_hbac-develUpgrade sssd-adUpgrade libsss_sudoUpgrade sssd-debuginfoUpgrade libsss_simpleifp-develUpgrade sssd-krb5-commonUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade python-sssUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssdUpgrade libsss_idmapUpgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade sssd-proxyUpgrade libsss_autofsUpgrade libsss_nss_idmap-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade sssdUpgrade libsss_certmap-develUpgrade libipa_hbac-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-debugsourceUpgrade libipa_hbac-develUpgrade python3-sss-murmurUpgrade libsss_sudo-debuginfoUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade python3-libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-ldap-debuginfoUpgrade python-sss-murmurUpgrade python-sssUpgrade libsss_certmap-debuginfoUpgrade libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade python3-sssUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade sssd-clientUpgrade libsss_autofs-debuginfoUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-common-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-nfs-idmapUpgrade python3-sss-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-toolsUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-libwbclient-debuginfoUpgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-debuginfoUpgrade sssd-libwbclient-develUpgrade sssd-krb5-debuginfoUpgrade python-libipa_hbacUpgrade python3-sss-murmur-debuginfoUpgrade sssd-proxyUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade sssd-winbind-idmapUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-adUpgrade python3-libipa_hbacUpgrade sssd-kcm-debuginfoUpgrade sssd-ipa-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libipa_hbacUpgrade python3-sssdconfigUpgrade sssd-common-pac-debuginfoUpgrade sssd-dbus-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-client-debuginfoUpgrade libsss_idmap-debuginfo | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade sssdUpgrade sssd-proxyUpgrade sssd-toolsUpgrade python-sssdconfigUpgrade sssd-adUpgrade sssd-ipaUpgrade sssd-commonUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade libsss_certmapUpgrade python-libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade python-sssUpgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-dbus | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sssUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-proxyUpgrade sssdUpgrade sssd-ldapUpgrade libsss_simpleifpUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-tools | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-adUpgrade python-sssdconfigUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade python-sssUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-dbusUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-nfs-idmapUpgrade sssd-ipaUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade python3-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssdUpgrade python-sssdconfigUpgrade sssd-adUpgrade python3-libipa_hbacUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade python3-sssUpgrade python3-sssdconfigUpgrade sssd-libwbclientUpgrade libsss_certmapUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-ldapUpgrade sssd-kcmUpgrade libsss_simpleifp-develUpgrade sssd-krb5Upgrade sssd-dbusUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade sssd-krb5-commonUpgrade sssd-libwbclient-develUpgrade python-sssUpgrade sssd-common-pacUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade python-libsss_nss_idmapUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade sssd-polkit-rulesUpgrade python3-sss-murmurUpgrade libsss_nss_idmap-devel | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade libsss_certmapUpgrade sssd-polkit-rulesUpgrade python-sssUpgrade libsss_certmap-develUpgrade sssd-nfs-idmapUpgrade sssd-common-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssd-ldap-debuginfoUpgrade python3-libsss_nss_idmapUpgrade sssd-debugsourceUpgrade sssd-proxyUpgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-proxy-debuginfoUpgrade libsss_simpleifpUpgrade libsss_sudo-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-krb5Upgrade sssd-tools-debuginfoUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-adUpgrade libipa_hbac-debuginfoUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade python3-sss-murmurUpgrade sssd-kcmUpgrade sssd-krb5-common-debuginfoUpgrade sssd-libwbclient-develUpgrade libsss_idmap-develUpgrade libsss_certmap-debuginfoUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-krb5-debuginfoUpgrade libsss_simpleifp-develUpgrade sssd-winbind-idmapUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssd-client-debuginfoUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-ldapUpgrade python3-sss-debuginfoUpgrade python3-libipa_hbacUpgrade python3-libsss_nss_idmap-debuginfoUpgrade python3-sssdconfigUpgrade sssd-common-pacUpgrade python-libsss_nss_idmapUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade sssd-winbind-idmap-debuginfoUpgrade python-sss-murmurUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-toolsUpgrade libsss_simpleifp-debuginfoUpgrade sssd-ipa-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-kcm-debuginfoUpgrade libipa_hbacUpgrade sssd-common-pac-debuginfoUpgrade sssd-debuginfoUpgrade python3-sssUpgrade sssd-libwbclientUpgrade sssd-dbus-debuginfo | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade python3-sss-murmurUpgrade libsss_certmap0Upgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmap0Upgrade libsss_simpleifp0Upgrade python3-sss_nss_idmapUpgrade sssd-krb5Upgrade sssd-proxyUpgrade python-sssd-configUpgrade python3-ipa_hbacUpgrade libsss_nss_idmap-develUpgrade libipa_hbac0Upgrade libnfsidmap-sssUpgrade sssd-commonUpgrade libsss_certmap-develUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-krb5-commonUpgrade sssdUpgrade sssd-adUpgrade sssd-ipaUpgrade sssd-32bitUpgrade sssd-wbclient-develUpgrade libsss_sudoUpgrade sssd-ldapUpgrade libsss_idmap0Upgrade libsss_simpleifp-develUpgrade python3-sssd-configUpgrade sssd-wbclient | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub