p PatchFirst

CVE-2026-104033

CVE-2026-104033 · Sssd: sssd: access control bypass via improper ldap shadow expiration check

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass access controls and authenticate to the system. This allows unauthorized access to persist after the account was intended to be deactivated.

CVSS 5.4 · Medium · EPSS 0.2%

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • red hat openshift container platform 4

    No fix published

  • sssd Debian:12

    Versions
    • 2.10.1-1
    • 2.10.1-2
    • 2.11.1-1
    • 2.11.1-2
    • 2.11.1-2.1
    • 2.12.0-1
    • 2.12.0-2
    • 2.12.0-3~exp0
    • 2.12.0-4
    • 2.13.1-1
    • 2.13.1-2
    • 2.13.1-3
    • 2.8.2-4
    • 2.8.2-4+deb12u1
    • 2.9.1-1
    • 2.9.1-2
    • 2.9.2-1
    • 2.9.4-1
    • 2.9.4-1.1
    • 2.9.4-1.1~exp1
    • 2.9.4-2
    • 2.9.5-1
    • 2.9.5-2
    • 2.9.5-3
    • 2.9.5-4
    • 2.9.5-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Debian:13

    Versions
    • 2.10.1-2
    • 2.11.1-1
    • 2.11.1-2
    • 2.11.1-2.1
    • 2.12.0-1
    • 2.12.0-2
    • 2.12.0-3~exp0
    • 2.12.0-4
    • 2.13.1-1
    • 2.13.1-2
    • 2.13.1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:Pro:16.04:LTS

    Versions
    • 1.12.5-2
    • 1.13.1-2
    • 1.13.2-1
    • 1.13.3-1
    • 1.13.4-1
    • 1.13.4-1ubuntu1
    • 1.13.4-1ubuntu1.1
    • 1.13.4-1ubuntu1.2
    • 1.13.4-1ubuntu1.5
    • 1.13.4-1ubuntu1.6
    • 1.13.4-1ubuntu1.7
    • 1.13.4-1ubuntu1.8
    • 1.13.4-1ubuntu1.9
    • 1.13.4-1ubuntu1.10
    • 1.13.4-1ubuntu1.11
    • 1.13.4-1ubuntu1.12
    • 1.13.4-1ubuntu1.13
    • 1.13.4-1ubuntu1.14
    • 1.13.4-1ubuntu1.15
    • 1.13.4-1ubuntu1.15+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:Pro:18.04:LTS

    Versions
    • 1.15.3-2ubuntu1
    • 1.15.3-3ubuntu1
    • 1.16.0-5ubuntu1
    • 1.16.0-5ubuntu2
    • 1.16.1-1ubuntu1
    • 1.16.1-1ubuntu1.1
    • 1.16.1-1ubuntu1.2
    • 1.16.1-1ubuntu1.3
    • 1.16.1-1ubuntu1.4
    • 1.16.1-1ubuntu1.5
    • 1.16.1-1ubuntu1.6
    • 1.16.1-1ubuntu1.7
    • 1.16.1-1ubuntu1.8
    • 1.16.1-1ubuntu1.8+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:Pro:20.04:LTS

    Versions
    • 2.2.0-4ubuntu1
    • 2.2.2-1
    • 2.2.2-1ubuntu1
    • 2.2.3-1.1ubuntu1
    • 2.2.3-2
    • 2.2.3-3
    • 2.2.3-3ubuntu0.1
    • 2.2.3-3ubuntu0.2
    • 2.2.3-3ubuntu0.3
    • 2.2.3-3ubuntu0.4
    • 2.2.3-3ubuntu0.6
    • 2.2.3-3ubuntu0.7
    • 2.2.3-3ubuntu0.8
    • 2.2.3-3ubuntu0.9
    • 2.2.3-3ubuntu0.10
    • 2.2.3-3ubuntu0.11
    • 2.2.3-3ubuntu0.12
    • 2.2.3-3ubuntu0.13
    • 2.2.3-3ubuntu0.13+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:22.04:LTS

    Versions
    • 2.4.1-2ubuntu4
    • 2.5.2-4ubuntu1
    • 2.5.2-4ubuntu3
    • 2.5.2-4ubuntu4
    • 2.6.1-1ubuntu3
    • 2.6.3-1ubuntu3
    • 2.6.3-1ubuntu3.1
    • 2.6.3-1ubuntu3.2
    • 2.6.3-1ubuntu3.3
    • 2.6.3-1ubuntu3.4
    • 2.6.3-1ubuntu3.5
    • 2.6.3-1ubuntu3.6
    • 2.6.3-1ubuntu3.8
    • 2.6.3-1ubuntu3.9
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:24.04:LTS

    Versions
    • 2.9.1-2ubuntu2
    • 2.9.1-2ubuntu3
    • 2.9.2-1ubuntu2
    • 2.9.4-1ubuntu1
    • 2.9.4-1.1ubuntu3
    • 2.9.4-1.1ubuntu5
    • 2.9.4-1.1ubuntu6
    • 2.9.4-1.1ubuntu6.1
    • 2.9.4-1.1ubuntu6.2
    • 2.9.4-1.1ubuntu6.3
    • 2.9.4-1.1ubuntu6.4
    • 2.9.4-1.1ubuntu6.5
    • 2.9.4-1.1ubuntu6.6
    • 2.9.4-1.1ubuntu6.7
    • 2.9.4-1.1ubuntu6.8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:26.10

    Versions
    • 2.12.0-1ubuntu5
    • 2.12.0-4ubuntu1
    • 2.12.0-4ubuntu2
    • 2.12.0-4ubuntu3
    • 2.12.0-4ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sssd Ubuntu:26.04:LTS

    Versions
    • 2.10.1-2ubuntu5
    • 2.10.1-2ubuntu7
    • 2.12.0-1ubuntu3
    • 2.12.0-1ubuntu4
    • 2.12.0-1ubuntu5
    • 2.12.0-1ubuntu5.1
    • 2.12.0-1ubuntu5.2
    • 2.12.0-1ubuntu5.3
    • 2.12.0-1ubuntu5.4
    • 2.12.0-1ubuntu5.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →