The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sssd | Fedoraproject | 1.9.0 (including) | 1.9.0 (including) |
| Sssd | Fedoraproject | 1.9.1 (including) | 1.9.1 (including) |
| Sssd | Fedoraproject | 1.9.2 (including) | 1.9.2 (including) |
| Sssd | Fedoraproject | 1.9.3 (including) | 1.9.3 (including) |
| Sssd | Fedoraproject | 1.9.4 (including) | 1.9.4 (including) |
| Red Hat Enterprise Linux 6 | RedHat | sssd-0:1.9.2-82.4.el6_4 | * |
| Sssd | Ubuntu | quantal | * |
| Sssd | Ubuntu | raring | * |