A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-krb5-commonUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-debuginfoUpgrade python-sssUpgrade libipa_hbac-develUpgrade sssd-winbind-idmapUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade libsss_certmap-develUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-common-pacUpgrade sssd-kcmUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-commonUpgrade sssdUpgrade sssd-clientUpgrade sssd-proxyUpgrade sssd-libwbclient-develUpgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade libsss_certmapUpgrade sssd-ldap | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmap-debuginfoUpgrade libsss_simpleifp-develUpgrade libsss_certmap-debuginfoUpgrade sssd-dbusUpgrade python-sssUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade libsss_certmap-develUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-ldap-debuginfoUpgrade python3-libsss_nss_idmapUpgrade python-sss-murmurUpgrade libipa_hbac-debuginfoUpgrade sssd-kcmUpgrade python3-sssUpgrade libsss_sudo-debuginfoUpgrade libipa_hbac-develUpgrade sssd-debugsourceUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssdUpgrade python3-sss-murmurUpgrade sssd-proxy-debuginfoUpgrade sssd-krb5Upgrade python-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-common-pac-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade sssd-client-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-nfs-idmapUpgrade libsss_idmap-develUpgrade python3-sss-debuginfoUpgrade sssd-dbus-debuginfoUpgrade python3-sssdconfigUpgrade sssd-winbind-idmapUpgrade sssd-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-krb5-debuginfoUpgrade libsss_sudoUpgrade libsss_idmap-debuginfoUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade sssd-proxyUpgrade python3-sss-murmur-debuginfoUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssd-toolsUpgrade sssd-common-debuginfoUpgrade sssd-ipa-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-libwbclient-develUpgrade sssd-libwbclient-debuginfoUpgrade libipa_hbacUpgrade sssd-ldapUpgrade sssd-commonUpgrade python3-libipa_hbac-debuginfoUpgrade python3-libipa_hbacUpgrade sssd-krb5-common-debuginfoUpgrade sssd-adUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-winbind-idmap-debuginfo | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade sssd | May 31, 2023 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-ipaUpgrade sssd-proxyUpgrade sssdUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade sssd-clientUpgrade sssd-dbusUpgrade python-sssUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libsss_autofsUpgrade libipa_hbacUpgrade libsss_nss_idmap | Dec 4, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-ldapUpgrade sssdUpgrade sssd-krb5Upgrade libsss_idmapUpgrade libsss_simpleifpUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade sssd-proxyUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade sssd-ipaUpgrade libsss_sudoUpgrade sssd-dbusUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade libipa_hbacUpgrade python-sssUpgrade sssd-common-pac | Dec 18, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-sssUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade libipa_hbacUpgrade sssd-proxyUpgrade sssd-ipaUpgrade libsss_idmapUpgrade sssd-adUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssdUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-common-pac | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssdUpgrade sssd-nfs-idmapUpgrade sssd-adUpgrade python3-libsss_nss_idmapUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade python3-libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade python3-sss-murmurUpgrade python3-sssUpgrade libipa_hbacUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade python-sssUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-krb5Upgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade sssd-kcmUpgrade sssd-polkit-rulesUpgrade sssd-libwbclient-develUpgrade sssd-clientUpgrade python3-sssdconfigUpgrade sssd-commonUpgrade libsss_nss_idmap-develUpgrade libsss_autofs | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade python3-sssUpgrade sssd-ipaUpgrade libsss_simpleifp-develUpgrade sssd-debuginfoUpgrade sssd-krb5-commonUpgrade sssd-commonUpgrade python3-sss-murmurUpgrade sssd-libwbclient-debuginfoUpgrade python-libipa_hbacUpgrade python3-libipa_hbacUpgrade sssd-toolsUpgrade sssd-clientUpgrade python3-sss-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade libipa_hbac-develUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade sssd-libwbclient-develUpgrade sssd-krb5-common-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-kcmUpgrade sssd-dbusUpgrade libsss_idmap-debuginfoUpgrade python3-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade sssd-ldapUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-nfs-idmap-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade python-sss-murmurUpgrade sssd-ipa-debuginfoUpgrade libipa_hbacUpgrade sssd-kcm-debuginfoUpgrade libsss_sudoUpgrade libsss_nss_idmap-develUpgrade libsss_idmap-develUpgrade sssd-dbus-debuginfoUpgrade libsss_certmap-debuginfoUpgrade sssd-krb5-debuginfoUpgrade python-sssdconfigUpgrade libsss_autofsUpgrade sssd-client-debuginfoUpgrade sssdUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade libsss_sudo-debuginfoUpgrade python3-libsss_nss_idmapUpgrade libsss_autofs-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-ldap-debuginfoUpgrade sssd-polkit-rulesUpgrade libsss_certmap-develUpgrade libsss_certmapUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-debugsourceUpgrade sssd-common-debuginfoUpgrade python-sssUpgrade sssd-nfs-idmapUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade libipa_hbac-debuginfoUpgrade sssd-ad | Aug 7, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade sssd-krb5Upgrade python-sssd-configUpgrade libsss_simpleifp0Upgrade sssd-toolsUpgrade libsss_nss_idmap0Upgrade sssd-winbind-idmapUpgrade libsss_certmap0Upgrade python3-sss-murmurUpgrade sssd-dbusUpgrade python3-sss_nss_idmapUpgrade sssd-proxyUpgrade python3-ipa_hbacUpgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-wbclientUpgrade sssd-wbclient-develUpgrade libnfsidmap-sssUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssdUpgrade sssd-krb5-commonUpgrade libsss_certmap-develUpgrade python3-sssd-configUpgrade libsss_idmap0Upgrade sssd-adUpgrade libsss_nss_idmap-develUpgrade sssd-32bitUpgrade sssd-commonUpgrade libipa_hbac0Upgrade libsss_simpleifp-develUpgrade libsss_sudo | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub