CVE-2013-0287: Medium severity fedora hosted sssd vulnerability
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0287?
CVE-2013-0287 has a medium severity rating due to the potential for unauthorized access by remote authenticated users.
How do I fix CVE-2013-0287?
To fix CVE-2013-0287, upgrade to SSSD version 1.9.5 or later where the simple_deny_groups option is properly enforced.
What software is affected by CVE-2013-0287?
CVE-2013-0287 affects SSSD versions 1.9.0 through 1.9.4.
What type of vulnerability is CVE-2013-0287?
CVE-2013-0287 is a security vulnerability in the Simple Access Provider of the System Security Services Daemon.
Can CVE-2013-0287 be exploited remotely?
Yes, CVE-2013-0287 can be exploited remotely by authenticated users to bypass access restrictions.