VDB

CISA-2023-3758

CISA-2023-3758 PUBLISHED CVSS 7.1 HIGH

Reported by redhat · Published April 18, 2024

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Risk Scores

CVSS 3.1
7.1
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
0
Red HatRed Hat Enterprise Linux 80:2.9.4-3.el8_10
Red HatRed Hat Enterprise Linux 80:2.9.4-3.el8_10
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support0:2.6.2-4.el8_6.3
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support0:2.8.2-4.el8_8.2
Red HatRed Hat Enterprise Linux 90:2.9.4-6.el9_4
Red HatRed Hat Enterprise Linux 90:2.9.4-6.el9_4
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support0:2.6.2-4.el9_0.3
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support0:2.8.2-5.el9_2.4
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 80:2.6.2-4.el8_6.3
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support*, 0:2.6.2-4.el9_0.3
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support0:2.8.2-5.el9_2.4, 0:2.8.2-5.el9_2.4
Red HatRed Hat Enterprise Linux 9*, *, 0:2.9.4-6.el9_4
Red HatRed Hat Enterprise Linux 80:2.9.4-3.el8_10, 0:2.9.4-3.el8_10, 0:2.9.4-3.el8_10
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support*, 0:2.8.2-4.el8_8.2
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 80:2.6.2-4.el8_6.3, 0:2.6.2-4.el8_6.3
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support*, 0:2.6.2-4.el8_6.3

…and 2 more

Timeline

  • Apr 18, 2024 CVE Published
  • Nov 6, 2025 CVE Updated
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Distribution Patch
  • Apr 26, 2026 Security Advisory
  • Apr 26, 2026 Security Advisory
  • Apr 26, 2026 Security Advisory
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›