CVE-2023-3758

CVSS V2 None CVSS V3 None

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Overview

CVE ID
CVE-2023-3758

Assigner
redhat

Vulnerability Status
PUBLISHED

Published Version
2024-04-18T19:06:44.216Z

Last Modified Date
2024-06-04T17:17:31.274Z

Weakness Enumerations

CWE	URL
CWE-285	http://cwe.mitre.org/data/definitions/285.html

References

Reference URL	Reference Tags
https://access.redhat.com/errata/RHSA-2024:1919	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1920	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1921	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1922	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2571	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3270	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3758	vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2223762	issue-tracking x_refsource_REDHAT
https://github.com/SSSD/sssd/pull/7302
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RV3HIZI3SURBUQKSOOL3XE64OOBQ2HTK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XEP62IDS7A55D5UHM6GH7QZ7SQFOAPVF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMORAO2BDDA5YX4ZLMXDZ7SM6KU47SY5/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3758
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:59:23				Added to TrackCVE