CVE-2023-7090

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

CVSS v3 6.6 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2023-7090	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255723	Issue Tracking Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html
https://security.netapp.com/advisory/ntap-20240208-0001/
https://www.sudo.ws/releases/legacy/#1.8.28	Release Notes
https://access.redhat.com/security/cve/CVE-2023-7090	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255723	Issue Tracking Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html
https://security.netapp.com/advisory/ntap-20240208-0001/
https://www.sudo.ws/releases/legacy/#1.8.28	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:45

Type	Values Removed	Values Added
References	~~() https://access.redhat.com/security/cve/CVE-2023-7090 - Third Party Advisory~~	() https://access.redhat.com/security/cve/CVE-2023-7090 - Third Party Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2255723 - Issue Tracking, Patch, Third Party Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2255723 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html -~~	() https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html -
References	~~() https://security.netapp.com/advisory/ntap-20240208-0001/ -~~	() https://security.netapp.com/advisory/ntap-20240208-0001/ -
References	~~() https://www.sudo.ws/releases/legacy/#1.8.28 - Release Notes~~	() https://www.sudo.ws/releases/legacy/#1.8.28 - Release Notes
CVSS	v2 : ~~unknown~~ v3 : ~~8.8~~	v2 : unknown v3 : 6.6

08 Feb 2024, 10:15

Type	Values Removed	Values Added
References		() https://security.netapp.com/advisory/ntap-20240208-0001/ -

03 Feb 2024, 11:15

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html -

03 Jan 2024, 20:22

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~6.6~~	v2 : unknown v3 : 8.8
First Time		Sudo Project Sudo Project sudo
CPE		cpe:2.3:a:sudo_project:sudo::::::::
Summary		(es) Se encontró una falla en sudo en el manejo de ipa_hostname, donde ipa_hostname de /etc/sssd/sssd.conf no se propagó en sudo. Por lo tanto, genera una vulnerabilidad de mala gestión de privilegios en las aplicaciones, donde los hosts de los clientes conservan los privilegios incluso después de retirarlos.
References	~~() https://access.redhat.com/security/cve/CVE-2023-7090 -~~	() https://access.redhat.com/security/cve/CVE-2023-7090 - Third Party Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2255723 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2255723 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://www.sudo.ws/releases/legacy/#1.8.28 -~~	() https://www.sudo.ws/releases/legacy/#1.8.28 - Release Notes

23 Dec 2023, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-23 23:15

Updated : 2024-11-21 08:45

NVD link : CVE-2023-7090

Mitre link : CVE-2023-7090

CVE.ORG link : CVE-2023-7090

JSON object : View

Products Affected

sudo_project

sudo

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2023-7090", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 2.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-12-23T23:15:07.560", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2023-7090", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255723", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html", "source": "secalert@redhat.com"}, {"url": "https://security.netapp.com/advisory/ntap-20240208-0001/", "source": "secalert@redhat.com"}, {"url": "https://www.sudo.ws/releases/legacy/#1.8.28", "tags": ["Release Notes"], "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-7090", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255723", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20240208-0001/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.sudo.ws/releases/legacy/#1.8.28", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en sudo en el manejo de ipa_hostname, donde ipa_hostname de /etc/sssd/sssd.conf no se propag\u00f3 en sudo. Por lo tanto, genera una vulnerabilidad de mala gesti\u00f3n de privilegios en las aplicaciones, donde los hosts de los clientes conservan los privilegios incluso despu\u00e9s de retirarlos."}], "lastModified": "2024-11-21T08:45:13.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07F52D32-AC76-42B8-B59F-57D5E36010CB", "versionEndExcluding": "1.8.28"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

6.6 /10