Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SSSD Simple Access Provider ‘simple_deny_groups’访问控制绕过漏洞
Vulnerability Description
System Security Services Daemon(SSSD) 1.9.0和更高版本中存在安全绕过漏洞，该漏洞源于Simple Access Provider使用‘simple_deny_groups’选项(/etc/sssd/sssd.conf)时应用程序没有正确限制访问。攻击者利用该漏洞绕过访问控制。成功的利用需要应用程序配置使用Microsoft Active Directory Provider或等效LDAP Provider配置。
CVSS Information
N/A
Vulnerability Type
N/A