2 matches found
CVE-2026-90462 Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...
5.4CVSS0.0018EPSS
SaveExploits1References2
CVE-2026-90462
A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...
5.4CVSS5.7AI score0.0018EPSS
SaveExploits1References3
20