CVSS 3.1
7.1 highCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-3758
High (7.1). EPSS 1.0% chance of exploitation in the next 30 days.
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fedoraproject:fedora
- fedoraproject:sssd
- redhat:codeready_linux_builder
- redhat:codeready_linux_builder_eus
- redhat:codeready_linux_builder_for_arm64
- redhat:codeready_linux_builder_for_arm64_eus
- redhat:codeready_linux_builder_for_ibm_z_systems
- redhat:codeready_linux_builder_for_ibm_z_systems_eus
- redhat:codeready_linux_builder_for_power_little_endian
- redhat:codeready_linux_builder_for_power_little_endian_eus
- redhat:enterprise_linux
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_for_arm_64
- redhat:enterprise_linux_for_arm_64_eus
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_ibm_z_systems_eus
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_for_power_little_endian_eus
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_update_services_for_sap_solutions
- redhat:virtualization_host