CVE-2026-104033 | CVSS: 5.4 | 严重级别: MEDIUM
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass access controls and authenticate to the system. This allows unauthorized access to persist after the account was intended to be deactivated.
参考链接:
• https://access.redhat.com/security/cve/CVE-2026-104033
• https://bugzilla.redhat.com/show_bug.cgi?id=2479271
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。