https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:21:03.999512+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-07147 bdu:2015-07147 2026-10-07T02:21:04.245485+00:00 bdu:2015-07147 https://cve.radiocsirt.org/vuln/euvd-2026-104608 EUVD-2026-104608 2026-10-07T02:21:04.245526+00:00 EUVD-2026-104608 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0287 fkie_cve-2013-0287 2026-10-07T02:21:04.245541+00:00

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-h53f-x74p-cc2v GHSA-h53f-x74p-cc2v 2026-10-07T02:21:04.245571+00:00

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.

 https://cve.radiocsirt.org/vuln/gsd-2013-0287 gsd-2013-0287 2026-10-07T02:21:04.245587+00:00 gsd-2013-0287 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10427-1 openSUSE-SU-2024:10427-1 — libipa_hbac-devel-1.14.2-3.1 on GA media 2026-10-07T02:21:04.245599+00:00

libipa_hbac-devel-1.14.2-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2013:0663 RHSA-2013:0663 — Red Hat Security Advisory: sssd security and bug fix update 2026-10-07T02:21:04.245620+00:00

sssd: simple access provider flaw prevents intended ACL use when client to an AD provider

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0287 Withdrawn: UBUNTU-CVE-2013-0287 2026-10-07T02:21:04.245637+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: sssd

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.