REDHAT-BUG-700867: Medium severity suse sssd (system security services daemon) with kerberos 5 support vulnerability
A flaw was introduced in SSSD 1.5.0 that, under certain conditions, would have sssd overwrite a cached password with the filename of the kerberos credential store (defined by krb5ccachetemplate in sssd.conf). This could allow an attacker to gain access to an account without knowing the password if they knew the cached-credential string.
This flaw does not affect earlier versions of SSSD that did not have support for automatic ticket renewal services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-700867?
The severity of REDHAT-BUG-700867 is high due to the potential for unauthorized access to accounts without knowing passwords.
How do I fix REDHAT-BUG-700867?
To fix REDHAT-BUG-700867, upgrade to a version of SSSD later than 1.5.0 that addresses this flaw.
What are the implications of REDHAT-BUG-700867?
The implications of REDHAT-BUG-700867 include increased risk of credential theft and unauthorized access to accounts leveraging the cached passwords.
Which software is affected by REDHAT-BUG-700867?
REDHAT-BUG-700867 affects SSSD version 1.5.0 and earlier, particularly in configurations using Kerberos.
Can an attacker exploit REDHAT-BUG-700867 remotely?
Yes, an attacker could potentially exploit REDHAT-BUG-700867 remotely under specific conditions where they can manipulate the cached password.