CVE-2023-3758 HIGH

CVE-2023-3758: Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-362
Published April 18, 2024
Last update November 6, 2025
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Adjacent
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Key dates

02Disclosure timeline

April 18, 2024 CVE published
November 6, 2025 Record updated