CVE-2023-3758

HIGH

MEDIUM Priority: 0.07 BB Relevance: 39/100

Published: 2024-04-18 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Adjacent No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent

AC: High

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Weakness Classification (1)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization

Affected Software (80)

Vendor	Product	Version
—	—	0 < 2.9.5
fedoraproject	fedora	38
fedoraproject	fedora	39
fedoraproject	fedora	40
fedoraproject	sssd	< 2.9.5
redhat	codeready_linux_builder	8.0
redhat	codeready_linux_builder_eus	8.6
redhat	codeready_linux_builder_eus	8.8
redhat	codeready_linux_builder_eus	9.0
redhat	codeready_linux_builder_eus	9.2
redhat	codeready_linux_builder_eus	9.4
redhat	codeready_linux_builder_eus	9.6
redhat	codeready_linux_builder_for_arm64	8.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	8.6_aarch64
redhat	codeready_linux_builder_for_arm64_eus	8.8_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.4_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.6_aarch64
redhat	codeready_linux_builder_for_ibm_z_systems	8.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	8.6_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	8.8_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.4_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.6_s390x
redhat	codeready_linux_builder_for_power_little_endian	8.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	8.6_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	8.8_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.0_ppc64le

Showing 30 of 80 entries