CVE-2023-3758 in sssd

Tóm tắt

Bởi MITRE • 18/04/2024

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: Red Hat, Inc.
• Đặt trước: 18/07/2023
• Tiết lộ: 18/04/2024
• Kiểm duyệt: được chấp nhận
• mục: VDB-261506
• CPE: sẵn sàng
• CWE: CWE-362 (Đã xác nhận)
• CVSS: 7.1 (CNA)
• EPSS: 0.01033
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3758
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3758
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3758/