openSUSE Security Update : sssd (openSUSE-2019-574)

This update for sssd fixes the following security issue : - CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users bsc1098377. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenabl...

Design/Logic Flaw

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

CVE-2018-16838

CVE-2018-16838 describes a flaw in the sssd Group Policy Objects (GPOs) handling. If the GPOs are not readable because of overly strict server-side permissions, SSSD erroneously allows all authenticated users to log in instead of denying access. The connected documents (e.g., MiracleLinux AXSA ad...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

OPENSUSE-SU-2019:0344-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

openSUSE Security Update : sssd (openSUSE-2019-344)

This update for sssd fixes the following issues : Security vulnerability addresed : - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes : - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

Security update for sssd (moderate)

openSUSE Security Update: Security update for sssd Announcement ID: openSUSE-SU-2019:0344-1 Rating: moderate References: 1004220 1087320 1120852 1121759 1125277 Cross-References: CVE-2019-3811 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has four fixes is now...

SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0556-1)

This update for sssd fixes the following issues : Security vulnerabilities addressed : Fix fallbackhomedir returning '/' for empty home directories CVE-2019-3811 bsc1121759 Create sockets with right permissions bsc1098377, CVE-2018-10852 Other bug fixes and changes: Install logrotate configuratio...

SUSE SLES12 Security Update : sssd (SUSE-SU-2019:0552-1)

This update for sssd fixes the following issues : Security vulnerability fixed : CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: Skip sdapsavegrpmem if ignoregroupmembers is set. bsc1082568 Only search for primary group if it is...

SUSE-SU-2019:0556-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerabilities addressed: - Fix fallbackhomedir returning '/' for empty home directories CVE-2019-3811 bsc1121759 - Create sockets with right permissions bsc1098377, CVE-2018-10852 Other bug fixes and changes: - Install logrotate...

SUSE-SU-2019:0552-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability fixed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Skip sdapsavegrpmem if ignoregroupmembers is set. bsc1082568 - Only search for primary group if it...

SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2019:0542-1)

This update for sssd fixes the following issues : Security vulnerability addresed : CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: Install logrotate configuration bsc1004220 Align systemd service file with upstream, run...

SUSE-SU-2019:0542-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

PT-2019-5664 · Red Hat +5 · Sssd +6

Name of the Vulnerable Software and Affected Versions: sssd affected versions not specified Description: A flaw was found in the sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to too strict permission settings on the server side, SSSD will allow all authenticat...

Amazon Linux AMI : sssd (ALAS-2018-1127)

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. CVE-2018-10852 C Tenable Network...