A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libipa_hbacamazon-linux-ami-2-upgrade-libipa_hbac-develamazon-linux-ami-2-upgrade-libsss_autofsamazon-linux-ami-2-upgrade-libsss_certmapamazon-linux-ami-2-upgrade-libsss_certmap-develamazon-linux-ami-2-upgrade-libsss_idmapamazon-linux-ami-2-upgrade-libsss_idmap-develamazon-linux-ami-2-upgrade-libsss_nss_idmapamazon-linux-ami-2-upgrade-libsss_nss_idmap-develamazon-linux-ami-2-upgrade-libsss_simpleifpamazon-linux-ami-2-upgrade-libsss_simpleifp-develamazon-linux-ami-2-upgrade-libsss_sudoamazon-linux-ami-2-upgrade-python-libipa_hbacamazon-linux-ami-2-upgrade-python-libsss_nss_idmapamazon-linux-ami-2-upgrade-python-sssamazon-linux-ami-2-upgrade-python-sss-murmuramazon-linux-ami-2-upgrade-python-sssdconfigamazon-linux-ami-2-upgrade-sssdamazon-linux-ami-2-upgrade-sssd-adamazon-linux-ami-2-upgrade-sssd-clientamazon-linux-ami-2-upgrade-sssd-commonamazon-linux-ami-2-upgrade-sssd-common-pacamazon-linux-ami-2-upgrade-sssd-dbusamazon-linux-ami-2-upgrade-sssd-debuginfoamazon-linux-ami-2-upgrade-sssd-ipaamazon-linux-ami-2-upgrade-sssd-kcmamazon-linux-ami-2-upgrade-sssd-krb5amazon-linux-ami-2-upgrade-sssd-krb5-commonamazon-linux-ami-2-upgrade-sssd-ldapamazon-linux-ami-2-upgrade-sssd-libwbclientamazon-linux-ami-2-upgrade-sssd-libwbclient-develamazon-linux-ami-2-upgrade-sssd-polkit-rulesamazon-linux-ami-2-upgrade-sssd-proxyamazon-linux-ami-2-upgrade-sssd-toolsamazon-linux-ami-2-upgrade-sssd-winbind-idmap | Apr 27, 2020 | Mar 25, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-sssd | Oct 11, 2019 | Mar 25, 2019 |
| Centos_linux | — | centos-upgrade-libipa_hbaccentos-upgrade-libipa_hbac-debuginfocentos-upgrade-libipa_hbac-develcentos-upgrade-libsss_autofscentos-upgrade-libsss_autofs-debuginfocentos-upgrade-libsss_certmapcentos-upgrade-libsss_certmap-debuginfocentos-upgrade-libsss_certmap-develcentos-upgrade-libsss_idmapcentos-upgrade-libsss_idmap-debuginfocentos-upgrade-libsss_idmap-develcentos-upgrade-libsss_nss_idmapcentos-upgrade-libsss_nss_idmap-debuginfocentos-upgrade-libsss_nss_idmap-develcentos-upgrade-libsss_simpleifpcentos-upgrade-libsss_simpleifp-debuginfocentos-upgrade-libsss_simpleifp-develcentos-upgrade-libsss_sudocentos-upgrade-libsss_sudo-debuginfocentos-upgrade-python-libipa_hbaccentos-upgrade-python-libsss_nss_idmapcentos-upgrade-python-ssscentos-upgrade-python-sss-murmurcentos-upgrade-python-sssdconfigcentos-upgrade-python3-libipa_hbaccentos-upgrade-python3-libipa_hbac-debuginfocentos-upgrade-python3-libsss_nss_idmapcentos-upgrade-python3-libsss_nss_idmap-debuginfocentos-upgrade-python3-ssscentos-upgrade-python3-sss-debuginfocentos-upgrade-python3-sss-murmurcentos-upgrade-python3-sss-murmur-debuginfocentos-upgrade-python3-sssdconfigcentos-upgrade-sssdcentos-upgrade-sssd-adcentos-upgrade-sssd-ad-debuginfocentos-upgrade-sssd-clientcentos-upgrade-sssd-client-debuginfocentos-upgrade-sssd-commoncentos-upgrade-sssd-common-debuginfocentos-upgrade-sssd-common-paccentos-upgrade-sssd-common-pac-debuginfocentos-upgrade-sssd-dbuscentos-upgrade-sssd-dbus-debuginfocentos-upgrade-sssd-debuginfocentos-upgrade-sssd-debugsourcecentos-upgrade-sssd-ipacentos-upgrade-sssd-ipa-debuginfocentos-upgrade-sssd-kcmcentos-upgrade-sssd-kcm-debuginfocentos-upgrade-sssd-krb5centos-upgrade-sssd-krb5-commoncentos-upgrade-sssd-krb5-common-debuginfocentos-upgrade-sssd-krb5-debuginfocentos-upgrade-sssd-ldapcentos-upgrade-sssd-ldap-debuginfocentos-upgrade-sssd-libwbclientcentos-upgrade-sssd-libwbclient-debuginfocentos-upgrade-sssd-libwbclient-develcentos-upgrade-sssd-nfs-idmapcentos-upgrade-sssd-nfs-idmap-debuginfocentos-upgrade-sssd-polkit-rulescentos-upgrade-sssd-proxycentos-upgrade-sssd-proxy-debuginfocentos-upgrade-sssd-toolscentos-upgrade-sssd-tools-debuginfocentos-upgrade-sssd-winbind-idmapcentos-upgrade-sssd-winbind-idmap-debuginfo | Aug 28, 2019 | Mar 25, 2019 |
| Debian | debian-upgrade-sssd | May 31, 2023 | Mar 25, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libipa_hbachuawei-euleros-2_0_sp2-upgrade-libsss_autofshuawei-euleros-2_0_sp2-upgrade-libsss_certmaphuawei-euleros-2_0_sp2-upgrade-libsss_idmaphuawei-euleros-2_0_sp2-upgrade-libsss_nss_idmaphuawei-euleros-2_0_sp2-upgrade-libsss_simpleifphuawei-euleros-2_0_sp2-upgrade-libsss_sudohuawei-euleros-2_0_sp2-upgrade-python-libipa_hbachuawei-euleros-2_0_sp2-upgrade-python-libsss_nss_idmaphuawei-euleros-2_0_sp2-upgrade-python-ssshuawei-euleros-2_0_sp2-upgrade-python-sss-murmurhuawei-euleros-2_0_sp2-upgrade-python-sssdconfighuawei-euleros-2_0_sp2-upgrade-sssdhuawei-euleros-2_0_sp2-upgrade-sssd-adhuawei-euleros-2_0_sp2-upgrade-sssd-clienthuawei-euleros-2_0_sp2-upgrade-sssd-commonhuawei-euleros-2_0_sp2-upgrade-sssd-common-pachuawei-euleros-2_0_sp2-upgrade-sssd-dbushuawei-euleros-2_0_sp2-upgrade-sssd-ipahuawei-euleros-2_0_sp2-upgrade-sssd-krb5huawei-euleros-2_0_sp2-upgrade-sssd-krb5-commonhuawei-euleros-2_0_sp2-upgrade-sssd-ldaphuawei-euleros-2_0_sp2-upgrade-sssd-libwbclienthuawei-euleros-2_0_sp2-upgrade-sssd-proxyhuawei-euleros-2_0_sp2-upgrade-sssd-tools | Dec 4, 2019 | Mar 25, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libipa_hbachuawei-euleros-2_0_sp3-upgrade-libsss_autofshuawei-euleros-2_0_sp3-upgrade-libsss_certmaphuawei-euleros-2_0_sp3-upgrade-libsss_idmaphuawei-euleros-2_0_sp3-upgrade-libsss_nss_idmaphuawei-euleros-2_0_sp3-upgrade-libsss_simpleifphuawei-euleros-2_0_sp3-upgrade-libsss_sudohuawei-euleros-2_0_sp3-upgrade-python-libipa_hbachuawei-euleros-2_0_sp3-upgrade-python-libsss_nss_idmaphuawei-euleros-2_0_sp3-upgrade-python-ssshuawei-euleros-2_0_sp3-upgrade-python-sss-murmurhuawei-euleros-2_0_sp3-upgrade-python-sssdconfighuawei-euleros-2_0_sp3-upgrade-sssdhuawei-euleros-2_0_sp3-upgrade-sssd-adhuawei-euleros-2_0_sp3-upgrade-sssd-clienthuawei-euleros-2_0_sp3-upgrade-sssd-commonhuawei-euleros-2_0_sp3-upgrade-sssd-common-pachuawei-euleros-2_0_sp3-upgrade-sssd-dbushuawei-euleros-2_0_sp3-upgrade-sssd-ipahuawei-euleros-2_0_sp3-upgrade-sssd-krb5huawei-euleros-2_0_sp3-upgrade-sssd-krb5-commonhuawei-euleros-2_0_sp3-upgrade-sssd-ldaphuawei-euleros-2_0_sp3-upgrade-sssd-libwbclienthuawei-euleros-2_0_sp3-upgrade-sssd-proxyhuawei-euleros-2_0_sp3-upgrade-sssd-tools | Dec 18, 2019 | Mar 25, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libipa_hbachuawei-euleros-2_0_sp5-upgrade-libsss_autofshuawei-euleros-2_0_sp5-upgrade-libsss_certmaphuawei-euleros-2_0_sp5-upgrade-libsss_idmaphuawei-euleros-2_0_sp5-upgrade-libsss_nss_idmaphuawei-euleros-2_0_sp5-upgrade-libsss_simpleifphuawei-euleros-2_0_sp5-upgrade-libsss_sudohuawei-euleros-2_0_sp5-upgrade-python-libipa_hbachuawei-euleros-2_0_sp5-upgrade-python-libsss_nss_idmaphuawei-euleros-2_0_sp5-upgrade-python-ssshuawei-euleros-2_0_sp5-upgrade-python-sss-murmurhuawei-euleros-2_0_sp5-upgrade-python-sssdconfighuawei-euleros-2_0_sp5-upgrade-sssdhuawei-euleros-2_0_sp5-upgrade-sssd-adhuawei-euleros-2_0_sp5-upgrade-sssd-clienthuawei-euleros-2_0_sp5-upgrade-sssd-commonhuawei-euleros-2_0_sp5-upgrade-sssd-common-pachuawei-euleros-2_0_sp5-upgrade-sssd-dbushuawei-euleros-2_0_sp5-upgrade-sssd-ipahuawei-euleros-2_0_sp5-upgrade-sssd-krb5huawei-euleros-2_0_sp5-upgrade-sssd-krb5-commonhuawei-euleros-2_0_sp5-upgrade-sssd-ldaphuawei-euleros-2_0_sp5-upgrade-sssd-libwbclienthuawei-euleros-2_0_sp5-upgrade-sssd-proxyhuawei-euleros-2_0_sp5-upgrade-sssd-tools | Nov 19, 2019 | Mar 25, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-libipa-hbacoracle-linux-upgrade-libipa-hbac-develoracle-linux-upgrade-libsss-autofsoracle-linux-upgrade-libsss-certmaporacle-linux-upgrade-libsss-certmap-develoracle-linux-upgrade-libsss-idmaporacle-linux-upgrade-libsss-idmap-develoracle-linux-upgrade-libsss-nss-idmaporacle-linux-upgrade-libsss-nss-idmap-develoracle-linux-upgrade-libsss-simpleifporacle-linux-upgrade-libsss-simpleifp-develoracle-linux-upgrade-libsss-sudooracle-linux-upgrade-python3-libipa-hbacoracle-linux-upgrade-python3-libsss-nss-idmaporacle-linux-upgrade-python3-sssoracle-linux-upgrade-python3-sssdconfigoracle-linux-upgrade-python3-sss-murmuroracle-linux-upgrade-python-libipa-hbacoracle-linux-upgrade-python-libsss-nss-idmaporacle-linux-upgrade-python-sssoracle-linux-upgrade-python-sssdconfigoracle-linux-upgrade-python-sss-murmuroracle-linux-upgrade-sssdoracle-linux-upgrade-sssd-adoracle-linux-upgrade-sssd-clientoracle-linux-upgrade-sssd-commonoracle-linux-upgrade-sssd-common-pacoracle-linux-upgrade-sssd-dbusoracle-linux-upgrade-sssd-ipaoracle-linux-upgrade-sssd-kcmoracle-linux-upgrade-sssd-krb5oracle-linux-upgrade-sssd-krb5-commonoracle-linux-upgrade-sssd-ldaporacle-linux-upgrade-sssd-libwbclientoracle-linux-upgrade-sssd-libwbclient-develoracle-linux-upgrade-sssd-nfs-idmaporacle-linux-upgrade-sssd-polkit-rulesoracle-linux-upgrade-sssd-proxyoracle-linux-upgrade-sssd-toolsoracle-linux-upgrade-sssd-winbind-idmap | Jul 21, 2020 | Feb 4, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Mar 25, 2019 | |
| Redhat_linux | redhat-upgrade-libipa_hbacredhat-upgrade-libipa_hbac-debuginforedhat-upgrade-libipa_hbac-develredhat-upgrade-libsss_autofsredhat-upgrade-libsss_autofs-debuginforedhat-upgrade-libsss_certmapredhat-upgrade-libsss_certmap-debuginforedhat-upgrade-libsss_certmap-develredhat-upgrade-libsss_idmapredhat-upgrade-libsss_idmap-debuginforedhat-upgrade-libsss_idmap-develredhat-upgrade-libsss_nss_idmapredhat-upgrade-libsss_nss_idmap-debuginforedhat-upgrade-libsss_nss_idmap-develredhat-upgrade-libsss_simpleifpredhat-upgrade-libsss_simpleifp-debuginforedhat-upgrade-libsss_simpleifp-develredhat-upgrade-libsss_sudoredhat-upgrade-libsss_sudo-debuginforedhat-upgrade-python-libipa_hbacredhat-upgrade-python-libsss_nss_idmapredhat-upgrade-python-sssredhat-upgrade-python-sss-murmurredhat-upgrade-python-sssdconfigredhat-upgrade-python3-libipa_hbacredhat-upgrade-python3-libipa_hbac-debuginforedhat-upgrade-python3-libsss_nss_idmapredhat-upgrade-python3-libsss_nss_idmap-debuginforedhat-upgrade-python3-sssredhat-upgrade-python3-sss-debuginforedhat-upgrade-python3-sss-murmurredhat-upgrade-python3-sss-murmur-debuginforedhat-upgrade-python3-sssdconfigredhat-upgrade-sssdredhat-upgrade-sssd-adredhat-upgrade-sssd-ad-debuginforedhat-upgrade-sssd-clientredhat-upgrade-sssd-client-debuginforedhat-upgrade-sssd-commonredhat-upgrade-sssd-common-debuginforedhat-upgrade-sssd-common-pacredhat-upgrade-sssd-common-pac-debuginforedhat-upgrade-sssd-dbusredhat-upgrade-sssd-dbus-debuginforedhat-upgrade-sssd-debuginforedhat-upgrade-sssd-debugsourceredhat-upgrade-sssd-iparedhat-upgrade-sssd-ipa-debuginforedhat-upgrade-sssd-kcmredhat-upgrade-sssd-kcm-debuginforedhat-upgrade-sssd-krb5redhat-upgrade-sssd-krb5-commonredhat-upgrade-sssd-krb5-common-debuginforedhat-upgrade-sssd-krb5-debuginforedhat-upgrade-sssd-ldapredhat-upgrade-sssd-ldap-debuginforedhat-upgrade-sssd-libwbclientredhat-upgrade-sssd-libwbclient-debuginforedhat-upgrade-sssd-libwbclient-develredhat-upgrade-sssd-nfs-idmapredhat-upgrade-sssd-nfs-idmap-debuginforedhat-upgrade-sssd-polkit-rulesredhat-upgrade-sssd-proxyredhat-upgrade-sssd-proxy-debuginforedhat-upgrade-sssd-toolsredhat-upgrade-sssd-tools-debuginforedhat-upgrade-sssd-winbind-idmapredhat-upgrade-sssd-winbind-idmap-debuginfo | Aug 7, 2019 | Mar 25, 2019 | |
| Suse | — | suse-upgrade-libipa_hbac-develsuse-upgrade-libipa_hbac0suse-upgrade-libnfsidmap-ssssuse-upgrade-libsss_certmap-develsuse-upgrade-libsss_certmap0suse-upgrade-libsss_idmap-develsuse-upgrade-libsss_idmap0suse-upgrade-libsss_nss_idmap-develsuse-upgrade-libsss_nss_idmap0suse-upgrade-libsss_simpleifp-develsuse-upgrade-libsss_simpleifp0suse-upgrade-libsss_sudosuse-upgrade-python-sssd-configsuse-upgrade-python3-ipa_hbacsuse-upgrade-python3-sss-murmursuse-upgrade-python3-sss_nss_idmapsuse-upgrade-python3-sssd-configsuse-upgrade-sssdsuse-upgrade-sssd-32bitsuse-upgrade-sssd-adsuse-upgrade-sssd-commonsuse-upgrade-sssd-dbussuse-upgrade-sssd-ipasuse-upgrade-sssd-krb5suse-upgrade-sssd-krb5-commonsuse-upgrade-sssd-ldapsuse-upgrade-sssd-proxysuse-upgrade-sssd-toolssuse-upgrade-sssd-wbclientsuse-upgrade-sssd-wbclient-develsuse-upgrade-sssd-winbind-idmap | Jun 12, 2019 | Mar 25, 2019 |
| Ubuntu | ubuntu-upgrade-sssd | Sep 9, 2021 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub