CVE-2023-3758
HIGH severity · CVSS 7.1 · CWE-362
7.1CVSS HIGH
Summary
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
Impact & exploitability
Attack vectorAdjacent
Attack complexityHigh
Privileges requiredLow
User interactionNone
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)1%
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products we track (2)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- https://access.redhat.com/errata/RHSA-2024:1919Advisory
- https://access.redhat.com/errata/RHSA-2024:1920Advisory
- https://access.redhat.com/errata/RHSA-2024:1921Advisory
- https://access.redhat.com/errata/RHSA-2024:1922Advisory
- https://access.redhat.com/errata/RHSA-2024:2571Advisory
- https://access.redhat.com/errata/RHSA-2024:3270Advisory
- https://access.redhat.com/security/cve/CVE-2023-3758Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2223762Advisory