Search/CVE-2023-3758
● CVE — High

CVE-2023-3758

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

View graph Watch Export
CVSS v3.1
7.1 HIGH
EPSS
1.03%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
24 relationships
fedora
source
enterprise linux
source
enterprise linux eus
source
enterprise linux for arm 64
source
enterprise linux for arm 64 eus
source
enterprise linux for ibm z systems
source
enterprise linux for ibm z systems eus
source
enterprise linux for power little endian
source
enterprise linux for power little endian eus
source
enterprise linux server aus
source
enterprise linux server for power little endian update services for sap solutions
source
enterprise linux server tus
source
enterprise linux update services for sap solutions
source
virtualization host
source
sssd
source
codeready linux builder
source
codeready linux builder eus
source
codeready linux builder for power little endian eus
source
codeready linux builder for ibm z systems
source
codeready linux builder for power little endian
source
codeready linux builder for arm64
source
codeready linux builder for arm64 eus
source
codeready linux builder for ibm z systems eus
source
Timeline
disclosure → media coverage
Apr 18, 2024
Disclosure — published as a CVE record. · last revised by NVD Nov 3, 2025