CVE-2023-3758

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

References

https://lists.fedoraproject.org/archives/list/[email protected]/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5/

https://lists.fedoraproject.org/archives/list/[email protected]/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF/

https://lists.fedoraproject.org/archives/list/[email protected]/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK/

https://github.com/SSSD/sssd/pull/7302

https://bugzilla.redhat.com/show_bug.cgi?id=2223762

https://access.redhat.com/security/cve/CVE-2023-3758

https://access.redhat.com/errata/RHSA-2024:3270

https://access.redhat.com/errata/RHSA-2024:2571

https://access.redhat.com/errata/RHSA-2024:1922

https://access.redhat.com/errata/RHSA-2024:1921

https://access.redhat.com/errata/RHSA-2024:1920

https://access.redhat.com/errata/RHSA-2024:1919

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3