Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mrc-5phh-m9pc

Опубликовано: 24 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.6
ubuntu
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
redhat
почти 6 лет назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
nvd
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
debian
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_ho ...

CVSS3: 8.8
redos
больше 1 года назад

Уязвимость в sudo

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-269