The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0076 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 8.6. It addresses 9 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2023-3758, and 4 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when     LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication     requirements of pam_authenticate via an empty password. (CVE-2010-2940)

Note that Nessus relies on the presence of the package as reported by the vendor.

- CVE-2010-2940 - SSSD allows null password entry to     authenticate against LDAP

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
357983	Rocky Linux 8.6 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0076)	Nessus	Rocky Linux Local Security Checks	Local	high
217270	Linux Distros Unpatched Vulnerability : CVE-2010-2940	Nessus	Misc.	Local	critical
49095	Fedora 12 : sssd-1.2.2-20.fc12 (2010-13557)	Nessus	Fedora Local Security Checks	Local	medium
49094	Fedora 13 : sssd-1.2.2-21.fc13 (2010-13549)	Nessus	Fedora Local Security Checks	Local	medium
49075	Fedora 14 : sssd-1.3.0-30.fc14 (2010-13474)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2010-2940

critical

Tenable Plugins

high

critical

medium

medium

medium