Improper Authorization Affecting sssd package, versions [0,]
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-SSSD-6670043
- published 21 Apr 2024
- disclosed 16 Apr 2024
- credit Unknown
Introduced: 16 Apr 2024
New CVE-2023-3758 Open this link in a new tabHow to fix?
A fix was pushed into the master branch but not yet published.
Overview
Affected versions of this package are vulnerable to Improper Authorization due to a race condition during the authorization process, which leads to inconsistent application of GPO policies for authenticated users. This inconsistency may result in improper authorization, either granting or denying access to resources inappropriately.
Workaround
This vulnerability can be mitigated by applying a configuration change to the sssd.conf file to make the occurrence of the race condition more difficult: Increase the GPO cache timeout by editing the ad_gpo_cache_timeout directive to a value of 3600, which extends the cache timeout to one hour but may delay GPO updates propagation from the AD server to local machines.