CVE-2026-92821
Sssd: sssd: access control bypass via premature ldap access rule evaluation
En bref
- Sévérité
- MEDIUM 6.8
- EPSS
- EPSS 0.31 % · centile 24 (2026-10-28)
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- redhat
- Statut NVD
- Undergoing Analysis
Description
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote authenticated user with an expired password using an alternative authentication method, such as SSH public key authentication, can exploit this flaw to bypass access control restrictions and gain unauthorized access to protected systems.
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.8 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N | redhat |
| CVSS 3.1 | MEDIUM 6.8 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N | NVD · secalert@redhat.com (Secondary) |
Faiblesses (CWE)
Références européennes
- ENISA EUVD · EUVD-2026-92894
- GCVE · GCVE-0-2026-92821
Produits affectés
Références
- https://access.redhat.com/security/cve/CVE-2026-92821
- https://bugzilla.redhat.com/show_bug.cgi?id=2479031
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |