Vulnerabilities in SSSD

2 results

CVE-2012-3462—A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the EPSS 1.6%CVE-2017-12173MEDIUMIt was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and wEPSS 1.5%