SSSD CVE-2013-0287 Remote Security Bypass Vulnerability

Bugtraq ID:	58593
Class:	Access Validation Error
CVE:	CVE-2013-0287
Remote:	Yes
Local:	No
Published:	Mar 19 2013 12:00AM
Updated:	Apr 16 2015 05:46PM
Credit:	Kaushik Banerjee
Vulnerable:	Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 CentOS CentOS 6
Not Vulnerable:

SSSD CVE-2013-0287 Remote Security Bypass Vulnerability

SSSD is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to the application, which may lead to further attacks.

SSSD 1.9.0 is vulnerable; other versions may also be affected.

SSSD CVE-2013-0287 Remote Security Bypass Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SSSD CVE-2013-0287 Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SSSD CVE-2013-0287 Remote Security Bypass Vulnerability

References:

• SSSD Homepage (Fedora)