sssd-ipa vulnerabilities (Red Hat)
15 vulnerabilities.
-
sssd-ipaRed Hat Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
sssd-ipaRed Hat Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssd-ipaRed Hat Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssd-ipaRed Hat Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssd-ipaRed Hat Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssd-ipaRed Hat sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssd-ipaRed Hat A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssd-ipaRed Hat A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssd-ipaRed Hat A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssd-ipaRed Hat The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssd-ipaRed Hat It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
sssd-ipaRed Hat Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in... 6.8 Medium -
sssd-ipaRed Hat vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management... 6.5 Medium -
sssd-ipaRed Hat Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to... 4.0 Medium -
sssd-ipaRed Hat The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... 3.3 Low