ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-3758

PoC —
CVSS 3.1
7.1 high
EPSS
1%p62
Published
()
Modified
Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Vendors
fedoraprojectredhat
Products
sssd, codeready linux builder, codeready linux builder eus, codeready linux builder for arm64, codeready linux builder for arm64 eus, codeready linux builder for ibm z systems, codeready linux builder for ibm z systems eus, codeready linux builder for power little endian, codeready linux builder for power little endian eus, virtualization host, enterprise linux, enterprise linux eus
Weakness
CWE-362
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

No ingested article mentions this CVE yet.