Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mohammad Tausif

#28520of 53,633
9Total CVSS
Vulnerabilities · 1
PT-2023-8568
9.0
2023-12-23
Sudo · Sudo · CVE-2023-7090
**Name of the Vulnerable Software and Affected Versions** sudo (affected versions not specified) **Description** A flaw was found in sudo in the handling of `ipa hostname`, where `ipa hostname` from `/etc/sssd/sssd.conf` was not propagated in sudo. This leads to a privilege mismanagement issue in applications, where client hosts retain privileges even after they have been retracted. The vulnerability may allow a remote attacker to bypass existing security restrictions and maintain privileges after they have been revoked. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.