Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-7090

Опубликовано: 23 дек. 2023
Источник: nvd
CVSS3: 6.6
CVSS3: 8.8
EPSS Низкий

Описание

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
Версия до 1.8.28 (исключая)

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-269
CWE-269

Связанные уязвимости

CVSS3: 6.6
ubuntu
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
redhat
почти 6 лет назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
debian
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_ho ...

CVSS3: 8.8
redos
больше 1 года назад

Уязвимость в sudo

CVSS3: 6.6
github
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-269
CWE-269