CVE-2021-3621: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected products

• Fedoraproject Fedora: version 34 only
• Fedoraproject Sssd: version 2.6.0 only
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only
• Red Hat Enterprise Linux Eus: version 8.1 only; version 8.2 only
• Red Hat Enterprise Linux Server Aus: version 8.2 only; version 8.4 only
• Red Hat Enterprise Linux Server Tus: version 8.2 only; version 8.4 only
• Red Hat Virtualization: version 4.0 only
• Red Hat Virtualization Host: version 4.0 only

Published 2021-12-23. Last modified 2026-06-17.