CVE-2010-0014

2010-01-1418:30:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

78.8%

JSON

System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user’s Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT.

Affected configurations

Nvd

Node

fedoraprojectsssdRange≤1.0.0

fedoraprojectsssdMatch0.2.1

fedoraprojectsssdMatch0.3.0

fedoraprojectsssdMatch0.3.1

fedoraprojectsssdMatch0.3.2

fedoraprojectsssdMatch0.3.3

fedoraprojectsssdMatch0.4.0

fedoraprojectsssdMatch0.4.1

fedoraprojectsssdMatch0.5.0

fedoraprojectsssdMatch0.6.0

fedoraprojectsssdMatch0.6.1

fedoraprojectsssdMatch0.7.0

fedoraprojectsssdMatch0.7.1

fedoraprojectsssdMatch0.99.0

fedoraprojectsssdMatch0.99.1

VendorProductVersionCPE
fedoraprojectsssd*cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*
fedoraprojectsssd0.2.1cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:*
fedoraprojectsssd0.3.0cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:*
fedoraprojectsssd0.3.1cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:*
fedoraprojectsssd0.3.2cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:*
fedoraprojectsssd0.3.3cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:*
fedoraprojectsssd0.4.0cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:*
fedoraprojectsssd0.4.1cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:*
fedoraprojectsssd0.5.0cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:*
fedoraprojectsssd0.6.0cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fedoraproject	sssd	*	cpe:2.3:a:fedoraproject:sssd::::::::
fedoraproject	sssd	0.2.1	cpe:2.3:a:fedoraproject:sssd:0.2.1:::::::*
fedoraproject	sssd	0.3.0	cpe:2.3:a:fedoraproject:sssd:0.3.0:::::::*
fedoraproject	sssd	0.3.1	cpe:2.3:a:fedoraproject:sssd:0.3.1:::::::*
fedoraproject	sssd	0.3.2	cpe:2.3:a:fedoraproject:sssd:0.3.2:::::::*
fedoraproject	sssd	0.3.3	cpe:2.3:a:fedoraproject:sssd:0.3.3:::::::*
fedoraproject	sssd	0.4.0	cpe:2.3:a:fedoraproject:sssd:0.4.0:::::::*
fedoraproject	sssd	0.4.1	cpe:2.3:a:fedoraproject:sssd:0.4.1:::::::*
fedoraproject	sssd	0.5.0	cpe:2.3:a:fedoraproject:sssd:0.5.0:::::::*
fedoraproject	sssd	0.6.0	cpe:2.3:a:fedoraproject:sssd:0.6.0:::::::*