The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0076 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 8.6. It addresses 9 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2023-3758, and 4 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1328 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 9.6. It addresses 11 CVEs:
    CVE-2018-16838, CVE-2010-4341, CVE-2010-2940, CVE-2017-12173, CVE-2025-11561, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0443 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 9.2. It addresses 11 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2018-16838, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- Fri Apr 29 2011 Stephen Gallagher <sgallagh at     redhat.com> - 1.5.7-1

    - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic       TGT renewal overwrites

    - cached password with predicatable filename

  - Wed Apr 20 2011 Stephen Gallagher <sgallagh at     redhat.com> - 1.5.6.1-1

    - Re-add manpage translations

  - Wed Apr 20 2011 Stephen Gallagher <sgallagh at     redhat.com> - 1.5.6-1

    - New upstream release 1.5.6

    -       https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.
      6

    - Fixed a serious memory leak in the memberOf plugin

    - Fixed a regression with the negative cache that caused       it to be essentially

    - nonfunctional

    - Fixed an issue where the user's full name would       sometimes be removed from

    - the cache

    - Fixed an issue with password changes in the kerberos       provider not working

    - with kpasswd

    - Resolves: rhbz#697057 - kpasswd fails when using sssd       and

    - kadmin server != kdc server

    - Fix a serious memory leak in the memberOf plugin

    - Fix an issue where the user's full name would       sometimes be removed

    - from the cache

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2011-1758 sssd: automatic TGT renewal overwrites cached password with predicatable filename

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
357983	Rocky Linux 8.6 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0076)	Nessus	Rocky Linux Local Security Checks	Local	high
355548	Rocky Linux 9.6 [CIQ] Security Update: libipa_hbac / libsss_autofs / libsss_certmap / libsss_idmap / etc Multiple Vulnerabilities (ciqsa-2026_1328)	Nessus	Rocky Linux Local Security Checks	Local	high
355472	Rocky Linux 9.2 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0443)	Nessus	Rocky Linux Local Security Checks	Local	high
53816	Fedora 14 : sssd-1.5.7-1.fc14 (2011-5815)	Nessus	Fedora Local Security Checks	Local	low
53645	Fedora 15 : sssd-1.5.7-1.fc15 (2011-6279)	Nessus	Fedora Local Security Checks	Local	low

Detections

Analytics

CVE-2011-1758

critical

Tenable Plugins

high

high

high

low

low