Orta CVSS 5.3 PoC var
CVE-2026-104047: Sssd: güvenlik açığı
Açıklama (NVD)
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.
Özet bilgiler
- Ürün
- Fedoraproject Sssd
- CVSS v3.1
- 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - EPSS
- %0,13 (yüzdelik 3)
- CWE
- CWE-140
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fedoraproject-sssd | 2.12.0 | 2.12.0 | — |
| redhat-openshift-container-platform | 4.0 | 4.0 | — |
| redhat-enterprise-linux | 7.0 | 7.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 10.0 | 10.0 | — |