CVE-2023-3758CWE-362

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

High · published April 18, 2024

CVSS v3.1
7.1
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-04-18T19:06Z
EPSS history
Timeline
  • 18 APR 19:06Z
    Sssd: race condition during authorization leads to gpo policies functioning inconsistently
    cvelistv5