Threats tagged 'ghsa-993g-jgf7-rg3x'

A vulnerability in SSSD's IdP authentication provider allows an attacker to impersonate another user if the attacker's IdP identifier is a strict prefix of the target user's identifier. This occurs because the eval_access_token_buf() function uses a prefix comparison instead of an exact match when validating the OIDC subject identifier.