vulnerability

Huawei EulerOS: CVE-2023-7090: sudo security update

Severity
6
CVSS
(AV:N/AC:L/Au:M/C:P/I:P/A:P)
Published
Dec 23, 2023
Added
Feb 12, 2024
Modified
Aug 13, 2025

Description

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

Solution

huawei-euleros-2_0_sp9-upgrade-sudo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.