CVE-2023-7090

Description

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://access.redhat.com/security/cve/CVE-2023-7090 ↗
• https://bugzilla.redhat.com/show_bug.cgi?id=2255723 ↗
• https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html ↗
• https://security.netapp.com/advisory/ntap-20240208-0001/ ↗
• https://www.sudo.ws/releases/legacy/#1.8.28 ↗