NetSight
IP …
high7.1

CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.

Impact

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Affected products

VendorProductAffected versions
FedoraprojectSssd
before 2.9.5
RedhatCodeready Linux Builder
Version 8.0
RedhatCodeready Linux Builder Eus
Versions 8.6, 8.8, 9.0, 9.2, 9.4, 9.6
RedhatCodeready Linux Builder For Arm64
Version 8.0_aarch64
RedhatCodeready Linux Builder For Arm64 Eus
Versions 8.6_aarch64, 8.8_aarch64, 9.0_aarch64, 9.2_aarch64, 9.4_aarch64, 9.6_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems
Version 8.0_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Versions 8.6_s390x, 8.8_s390x, 9.0_s390x, 9.2_s390x, 9.4_s390x, 9.6_s390x
RedhatCodeready Linux Builder For Power Little Endian
Version 8.0_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus
Versions 8.6_ppc64le, 8.8_ppc64le, 9.0_ppc64le, 9.2_ppc64le, 9.4_ppc64le, 9.6_ppc64le
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.0, 9.2, 9.4, 9.6

Weakness classification

CWE-362

References