EulerOS Virtualization 2.10.1 : sssd (EulerOS-SA-2024-2149)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to...

EulerOS 2.0 SP8 : sssd (EulerOS-SA-2024-2054)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...

SolarWinds Access Rights Manager Authorization Issues Vulnerability (CNVD-2024-34980)

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to abuse the SolarWinds service to remotely execute code...

SAP Commerce Authorization Issues Vulnerability (CNVD-2024-36346)

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. SAP Commerce suffers from an authorization issue vulnerability that originates from a user being able to abuse the...

Duplicate Advisory: CVE-2024-5138: snapd snapctl auth bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p9v8-q5m4-pf46. This link is maintained to preserve external references. Original Description The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privilege...

SAP My Travel Requests Authorization Issues Vulnerability

SAP My Travel Requests is a transactional application from SAP, USA. An authorization issue vulnerability exists in SAP My Travel Requests, which stems from a failure to perform the required authorization checks on authenticated users, and can be exploited by an attacker to cause an escalation of...

OpenCTI Authorization Issues Vulnerabilities

OpenCTI is OpenCTI's open cyber threat intelligence platform. An authorization issue vulnerability exists in OpenCTI version 5.12.31 and prior versions, which stems from a lack of certain security controls in the profile editing functionality, and can be exploited by an authenticated,...

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

CentOS 8 : sssd (CESA-2024:3270)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:3270 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization...

MGASA-2024-0176 Updated sssd packages fix security vulnerability

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. CVE-2023-3758...

Updated sssd packages fix security vulnerability

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. CVE-2023-3758...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2024:1578-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1578-1 advisory. - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently bsc1223100 Tenable has...

Fedora 38 : sssd (2024-44602bead8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-44602bead8 advisory. Fix CVE-2023-3758 https://bugzilla.redhat.com/showbug.cgi?id=2275905 Tenable has extracted the preceding description block directly from the Fedora security...

SUSE CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

UBUNTU-CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

CVE-2023-3758

CVE-2023-3758 affects the System Security Services Daemon (SSSD). A race condition causes GPO policy to be inconsistently applied for authenticated users, leading to improper authorization (granting or denying access). Publicly referenced advisories confirm this issue across multiple distribution...

CVE-2023-3758 Sssd: race condition during authorization leads to gpo policies functioning inconsistently

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

PT-2024-3761

Name of the Vulnerable Software and Affected Versions sssd affected versions not specified Description A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to...

SAP NetWeaver Authorization Issues Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. SAP NetWeaver has an authorization issue vulnerability that stems from a security misconfiguration in the...