Lucene search
HistoryDec 23, 2023 - 11:15 p.m.
CVE-2023-7090
flaw
sudo
ipa_hostname
privilege
mismanagement
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.8%
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
Affected configurations
Node
sudo_projectsudoRange<1.8.28
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sudo_project | sudo | * | cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:* |
Related
nessus
nessus
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1187)
2024-02-08 00:00:00
EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2024-1463)
2024-03-21 00:00:00
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1207)
2024-02-08 00:00:00
ubuntucve
ubuntucve
CVE-2023-7090
2023-12-23 00:00:00
osv
osv
CVE-2023-7090
2023-12-23 23:15:07
sudo - security update
2024-02-03 00:00:00
cve
cve
CVE-2023-7090
2023-12-23 23:15:07
cvelist
cvelist
prion
prion
Privilege escalation
2023-12-23 23:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1207)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1478)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1187)
2024-02-09 00:00:00
debiancve
debiancve
CVE-2023-7090
2023-12-23 23:15:07
veracode
veracode
Improper Privilege Management
2024-02-05 01:16:33
redhatcve
redhatcve
CVE-2023-7090
2023-12-23 20:00:23
redos
redos
ROS-20240208-01
2024-02-08 00:00:00
debian
debian
[SECURITY] [DLA 3732-1] sudo security update
2024-02-03 09:27:24
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.8%
Related for NVD:CVE-2023-7090