Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.

  • Published: Mar 21, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-0287
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:N/AC:M/Au:S/C:P/I:P/A:N

CWEs:

Software From Fixed in
fedoraproject / sssd 1.9.1 1.9.1.x
fedoraproject / sssd 1.9.2 1.9.2.x
fedoraproject / sssd 1.9.0 1.9.0.x
fedoraproject / sssd 1.9.3 1.9.3.x
fedoraproject / sssd 1.9.4 1.9.4.x