CVE-2012-3462 Auth bypass in sssd
SSSD ignores Host-Based Access Control rules when setting SELinux contexts, allowing unauthorized access to systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3462?
CVE-2012-3462 is a high-severity authentication bypass vulnerability in sssd, published on 26 Dec 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context.
Weakness: CWE-287
Which versions are affected by CVE-2012-3462?
It affects 1 product.
Products include Fedoraproject Sssd.
How do I fix CVE-2012-3462?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2012-3462 being exploited?
There is no known exploitation of CVE-2012-3462 in the wild and no public exploit code.
Other vulnerabilities in sssd
- CVE-2022-4254 Other in SSSD
- CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
- CVE-2015-5292 Denial of service in n/a
- CVE-2026-12610 Sssd: use-after-free crash in sssd' 'sssd_pam' process
- CVE-2026-104046 Sssd: sssd: denial of service via incomplete identity provider authentication requests
Sources
Also known as DEBIAN-CVE-2012-3462, GHSA-h73j-5p58-29r6.