VULNERABILITY INTELLIGENCE

CVE-2023-3758

CVSS score7.1 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2024-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Weakness classification

  • secalert@redhat.com: CWE-362
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-362

Primary references