CVE-2023-7090

Name of the Vulnerable Software and Affected Versions sudo (affected versions not specified)

Description A flaw was found in sudo in the handling of ipa hostname, where ipa hostname from /etc/sssd/sssd.conf was not propagated in sudo. This leads to a privilege mismanagement issue in applications, where client hosts retain privileges even after they have been retracted. The vulnerability may allow a remote attacker to bypass existing security restrictions and maintain privileges after they have been revoked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.