← CVE Intelligence

CVE-2023-3758

Sssd: race condition during authorization leads to gpo policies functioning inconsistently PUBLISHED

Description (CNA)

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 2.9.5
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.9.4-3.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.9.4-3.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:2.6.2-4.el8_6.3 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:2.8.2-4.el8_8.2 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.9.4-6.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.9.4-6.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:2.6.2-4.el9_0.3 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:2.8.2-5.el9_2.4 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:2.6.2-4.el8_6.3 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown

CWE

CWE-362

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.