CVEFinder.io

CVE-2026-90462

🔶 medium
🔍 Scan for this CVE
Summary

A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision, permitting continued authorization for a deleted or deprovisioned user. A remote attacker with prior valid account context could exploit this to maintain access to information and potentially make limi

Description

A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision, permitting continued authorization for a deleted or deprovisioned user. A remote attacker with prior valid account context could exploit this to maintain access to information and potentially make limited modifications to resources that should no longer be available.

CVSS Score
5.4
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-09-22
First Seen: 2026-09-24
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.2% of all 365,863 vulnerabilities in our database.

#284,590
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Sep 22, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
This issue was discovered by Found by AISLE in partnership with Red Hat.
SSVC data provided by CISA
Last Modified 2026-10-07
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE IDs (Weakness Types)
CWE-280

📦 Affected Products 6

Vendor Product Status Affected Versions
redhat enterprise_linux Affected
v10.0
redhat enterprise_linux Affected
v7.0
redhat enterprise_linux Affected
v8.0
redhat enterprise_linux Affected
v9.0
fedoraproject sssd Affected
v2.12.0
redhat openshift_container_platform Affected
v4.0

🔗 References 2

https://access.redhat.com/security/cve/CVE-2026-90462
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2479483
Exploit Issue Tracking Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-90996 🔶 medium 4.0 0.1 A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to th... 2026-09-14
CVE-2026-71219 🔶 medium 4.7 0.1 A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with a... 2026-09-03
CVE-2026-71220 ⚠️ high 7.0 0.2 A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode ... 2026-09-03
CVE-2026-71221 ⚠️ high 7.0 0.2 A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode meta... 2026-09-03
CVE-2026-71222 🔶 medium 5.3 0.1 A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute m... 2026-09-03
CVE-2026-71224 🔶 medium 4.7 0.1 A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untru... 2026-09-03
These CVEs affect the same products