Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-3758

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sssd

Default version status: unaffected

  • 0 to < 2.9.5affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.9.4-3.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.9.4-3.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:2.6.2-4.el8_6.3 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:2.8.2-4.el8_8.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.9.4-6.el9_4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.9.4-6.el9_4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support

Default version status: affected

  • 0:2.6.2-4.el9_0.3 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:2.8.2-5.el9_2.4 to < *unaffected

Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.6.2-4.el8_6.3 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

References