SUSE CVE-2017-12173

It was found that sssd's sysdbsearchuserbyupnres function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this fla...

PT-2017-3848

Name of the Vulnerable Software and Affected Versions sssd versions prior to 1.16.0 Description The issue is related to insufficient input validation in the sysdb search user by upn res function of the sssd service, which manages access to remote directories and authentication mechanisms. This fl...