The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0076 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 8.6. It addresses 9 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2023-3758, and 4 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1328 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 9.6. It addresses 11 CVEs:
    CVE-2018-16838, CVE-2010-4341, CVE-2010-2940, CVE-2017-12173, CVE-2025-11561, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0443 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 9.2. It addresses 11 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2018-16838, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

If a user was added to the SSSD BE database without setting a password, the user could ssh to the SSSD configured client and enter any password to gain access. This update resolves this issue so users with no password set are no longer able to login.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
357983	Rocky Linux 8.6 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0076)	Nessus	Rocky Linux Local Security Checks	Local	high
355548	Rocky Linux 9.6 [CIQ] Security Update: libipa_hbac / libsss_autofs / libsss_certmap / libsss_idmap / etc Multiple Vulnerabilities (ciqsa-2026_1328)	Nessus	Rocky Linux Local Security Checks	Local	high
355472	Rocky Linux 9.2 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0443)	Nessus	Rocky Linux Local Security Checks	Local	high
40425	Fedora 11 : sssd-0.4.1-3.fc11 (2009-8101)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2009-2410

critical

Tenable Plugins

high

high

high

high