SSSD permits a local user to submit specially crafted names containing single quotes when the Entra ID identity provider is active. Those names are not escaped before being used in Microsoft Graph OData queries. The malformed query allows the attacker to broaden search filters and retrieve directory objects that should not be visible, exposing sensitive information. The added processing of these requests can also consume resources, leading to a denial‑of‑service by exhausting cache and processing capacity.

This weakness exists in Red Hat Enterprise Linux releases 6 through 10 and in Red Hat OpenShift Container Platform 4. The affected component is the SSSD service when configured for Entra ID integration.

The CVSS score of 4.4 indicates a moderate severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited publicly known exploitation. The attack requires local user access; an attacker must be able to run SSSD‑related commands locally to craft the malicious input. Successful exploitation yields unintended disclosure of directory objects and potential service disruption but does not automatically grant higher privileges or remote code execution.