Read the docs
Red Hat Security Advisory

RHSA-2021:3178

sssd security update

Released 2021-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2021-02567 CVE-2021-3621 · GHSA-g527-g4q2-57xc

Command injection in sssd

Priority MEDIUM 43

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02648 Published 2021-12-23 Partial fix CWE-77