Skip to content
Sign in
5.4 Medium

CVE-2018-16838 A flaw was found in sssd Group Policy Objects implementation

Description

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.

Affected products and versions

Product Affected versions Fixed in
sssd Versions not published

Other CVEs of sssd

The 3 CVEs of sssd →
CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the… 2.5 Low CVE-2018-10852 The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions,… 3.8 Low
Track this CVE