CVE-2012-3462: Fedoraproject Sssd

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context.

Affected products

• Fedoraproject Sssd: version 1.9.0 only

Published 2019-12-26. Last modified 2026-06-16.