Lucene search

K
osvGoogleOSV:CVE-2023-7090
HistoryDec 23, 2023 - 11:15 p.m.

CVE-2023-7090

2023-12-2323:15:07
Google
osv.dev
3
flaw
sudo
ipa_hostname
privilege mismanagement
vulnerability
applications

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.9%

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.9%