CVE-2012-3462

HIGH 8.8CVE-2012-3462 · Published 26/12/2019 · updated 16/06/2026

In short

CVE-2012-3462 is a HIGH (CVSS 8.8) vulnerability affecting sssd (fedoraproject).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sssd fedoraproject	`= 1.9.0`	No fix yet

Description

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context.

References

access.redhat.com/security/cve/cve-2012-3462 · Broken Link
bugzilla.redhat.com/show_bug.cgi · Exploit
pagure.io/SSSD/sssd/issue/1470 · Exploit

More vulnerabilities in sssd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sssd

fedoraproject

= 1.9.0

No fix yet

More vulnerabilities in sssd

See all →