| Package | Affected versions | Patched versions |
|---|---|---|
| sssd | = 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4 |
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free