CVE-2023-7090 Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Attackers can retain elevated privileges after revocation due to improper handling of ipa_hostname in sudo, affecting systems using SSSD.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-7090?
CVE-2023-7090 is a medium-severity vulnerability in Fedora, published on 23 Dec 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
Weakness: CWE-269
Which versions are affected by CVE-2023-7090?
It affects 1 product.
Products include Sudo Project Sudo.
How do I fix CVE-2023-7090?
Apply the vendor's patch.
Is CVE-2023-7090 being exploited?
There is no known exploitation of CVE-2023-7090 in the wild and no public exploit code.
Other vulnerabilities in Fedora
Sources
Also known as DEBIAN-CVE-2023-7090, GHSA-8mrc-5phh-m9pc.