CVE-2023-7090
Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Résumé
Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-7090 sudo Corrigé dans: 1.8.28p1-1
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web packages.fedoraproject.org
- web sudo.ws