CVE-2023-3758 in sssd

الملخص

بحسب MITRE • 18/04/2024

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• مسؤول: Red Hat, Inc.
• حجز: 18/07/2023
• إفشاء: 18/04/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-261506
• CPE: جاهز
• CWE: CWE-362 (مؤكد)
• CVSS: 7.1 (CNA)
• EPSS: 0.01033
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3758
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3758
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3758/