A flaw was found in SSSD version 1.9.0. The SSSDs access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the users SELinux user context.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sssd | Fedoraproject | 1.9.0 (including) | 1.9.0 (including) |
| Sssd | Ubuntu | trusty | * |
| Sssd | Ubuntu | upstream | * |