CVE-2023-7090: Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Published Dec 23, 2023
·Updated
A flaw was found in sudo in the handling of ipahostname, where ipahostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
Affected Software
2 affected componentsFixes available
redhat/sudo<1.8.28
1.8.28
Sudo Project sudo<1.8.28
Remediation
Patch Available
Event History
Dec 23, 2023
Data Sourced
via Red Hat·07:40 PM
DescriptionSeverityAffected Software
CVE Published
10:33 PM
Data Sourced
10:33 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-7090?
CVE-2023-7090 has a significant severity rating due to its impact on privilege mismanagement.
2
How do I fix CVE-2023-7090?
To resolve CVE-2023-7090, users should upgrade to sudo version 1.8.28 or later.
3
What causes the CVE-2023-7090 vulnerability?
CVE-2023-7090 is caused by improper handling of the ipa_hostname in sudo, leading to privilege retention issues.
4
Who is affected by CVE-2023-7090?
Users of sudo versions prior to 1.8.28 are vulnerable to CVE-2023-7090.
5
Is there a workaround for CVE-2023-7090?
There are no documented workarounds for CVE-2023-7090; upgrading is the recommended solution.