Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-7090

Опубликовано: 23 дек. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.6

Описание

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

1.9.9-1ubuntu2.4
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

1.8.31-1ubuntu1.5
esm-infra/xenial

not-affected

code not present
focal

not-affected

1.8.31-1ubuntu1.5
jammy

not-affected

1.9.9-1ubuntu2.4
lunar

not-affected

1.9.9-1ubuntu2.4
mantic

not-affected

1.9.9-1ubuntu2.4

Показывать по

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.6
redhat
почти 6 лет назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
nvd
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS3: 6.6
debian
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_ho ...

CVSS3: 8.8
redos
больше 1 года назад

Уязвимость в sudo

CVSS3: 6.6
github
больше 1 года назад

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

EPSS

Процентиль: 15%
0.00049
Низкий

6.6 Medium

CVSS3