CVE-2014-0249 | BDVDB-2026-62068 Detail

Description#

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.fedorahosted.org/pipermail/sssd-devel/2014-May/019495.html
https://bugzilla.redhat.com/show_bug.cgi?id=1101751

Exploit#

No public exploit known

History#

Version 12014-06-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.