CVE-2010-2940: Fedoraproject Sssd

Medium severity, CVSS 5.1. EPSS: 2% chance of exploitation in the next 30 days.

The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

Affected products

• Fedoraproject Sssd: version 1.3.0 only

Published 2010-08-30. Last modified 2026-06-16.