Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0287
HistoryMar 21, 2013 - 12:00 a.m.

CVE-2013-0287

2013-03-2100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

EPSS

0.002

Percentile

59.0%

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0
through 1.9.4, when the Active Directory provider is used, does not
properly enforce the simple_deny_groups option, which allows remote
authenticated users to bypass intended access restrictions.

Notes

Author Note
jdstrand per Debian, affects only 1.9 and higher

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

EPSS

0.002

Percentile

59.0%