CVE-2014-0249

SSSD 1.11.6 - Local Access Restriction Bypass via Non-POSIX Group Membership

Title source: llm
STIX 2.1

Description

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

References (2)

Core 2
Core References
Various Sources mailing-list x_refsource_mlist
https://lists.fedorahosted.org/pipermail/sssd-devel/2014-May/019495.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1101751

Scores

EPSS 0.0034
EPSS Percentile 26.5%

Details

CWE
CWE-264
Status published
Products (3)
fedoraproject/sssd 1.11.6
redhat/enterprise_linux 5
redhat/enterprise_linux 6.0
Published Jun 11, 2014
Tracked Since Feb 18, 2026