CVE-2013-0287
EUVD-2013-030821.03.2013, 16:55
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fedoraproject | sssd | 1.9.0 |
| fedoraproject | sssd | 1.9.1 |
| fedoraproject | sssd | 1.9.2 |
| fedoraproject | sssd | 1.9.3 |
| fedoraproject | sssd | 1.9.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References