sssd vulnerabilities (Red Hat)
27 vulnerabilities.
-
sssdRed Hat Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
sssdRed Hat Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssdRed Hat Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssdRed Hat Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssdRed Hat Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssdRed Hat sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssdRed Hat A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssdRed Hat A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssdRed Hat A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssdRed Hat The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssdRed Hat It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
sssdRed Hat The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before... 7.5 High -
sssdRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB... 5.9 Medium -
sssdRed Hat The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before... 5.9 Medium -
sssdRed Hat Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509... 7.4 High -
sssdRed Hat The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x... 5.9 Medium -
sssdRed Hat The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4... 6.3 Medium -
sssdRed Hat The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,... 5.9 Medium -
sssdRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly... 5.9 Medium -
sssdRed Hat Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in... 6.8 Medium -
sssdRed Hat vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management... 6.5 Medium -
sssdRed Hat Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to... 4.0 Medium -
sssdRed Hat The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... 3.3 Low -
sssdRed Hat The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when... 4.9 Medium -
sssdRed Hat The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in... 5.0 Medium -
sssdRed Hat System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)... 3.7 Low -
sssdRed Hat The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD... 2.1 Low