CVE-2013-0287
Fixed in a distro release EPSS 2%
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
Products: fedoraproject sssd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | libipa_hbac | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libipa_hbac-devel | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libipa_hbac-python | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libsss_autofs | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libsss_idmap | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libsss_idmap-devel | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libsss_sudo | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | libsss_sudo-devel | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | sssd | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | sssd-client | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | sssd-debuginfo | 0:1.9.2-82.4.el6_4 |
| Red Hat Enterprise Linux 6 | sssd-tools | 0:1.9.2-82.4.el6_4 |
| openSUSE Tumbleweed | sssd | 1.14.2-3.1 |