Security
فارسی
All products

Red Hat Enterprise Linux 6/ipa

Red Hat · Package
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
XSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358 · DRUPAL-CORE-2019-006Version ranges need review. drupal/coremaximebf/debugbar ComposerMavennpmNuGetPyPIRed HatRubyGems Medium Fix reported
Potential XSS vulnerability in jQueryCVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2 athlon1600/youtube-downloadercomponents/jquery ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
Code injection in FreeIPACVE-2019-14867 · GHSA-7HPJ-HFCR-5QWMVersion ranges need review. freeipaipa PyPIRed Hat High Fix reported
FreeIPA logs passwords embedded in commands in calls using batchCVE-2019-10195 · GHSA-W4Q7-F34X-VPGCVersion ranges need review. freeipaipa PyPIRed Hat Medium Fix reported
Potential XSS vulnerability in jQueryCVE-2020-11023 · GHSA-JPCQ-CGW6-V4J6 components/jqueryorg.webjars.npm:jquery ComposerMavennpmNuGetRed HatRubyGemsWordPress Medium Fix reported
ipa: cross-realm kerberos with AD information leakCVE-2013-0199 Red Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
389-ds: unintended information exposure when rootdse is enabledCVE-2013-1897 Red Hat Enterprise Linux 6/ipa Red Hat Low No fix reported
ipa: DoS attack against kerberized services by abusing password policyCVE-2016-7030 Red Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: No password length restriction leads to denial of serviceCVE-2020-1722 Red Hat Enterprise Linux 6/ipa Red Hat Low No fix reported
ipa: Invalid CSRF protectionCVE-2023-5455 Red Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
freeipa: delegation rules allow a proxy service to impersonate any user to access another target serviceCVE-2024-2698 Red Hat Enterprise Linux 6/ipaRed Hat Enterprise Linux 7/ipa Red Hat High No fix reported
freeIPA: idm: Privilege escalation from host to domain admin in FreeIPACVE-2025-4404 Red Hat Enterprise Linux 6/ipa Red Hat High No fix reported
FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPACVE-2025-7493 Red Hat Enterprise Linux 6/ipa Red Hat High No fix reported
freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorizationCVE-2026-14612 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Low No fix reported
FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationshipsCVE-2026-11861 Red Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded OTP key decoding/re-encodingCVE-2026-73196 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body ReadCVE-2026-73197 Red Hat Enterprise Linux 6/ipa Red Hat High No fix reported
ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body ReadCVE-2026-73198 Red Hat Enterprise Linux 6/ipa Red Hat High No fix reported
ipa: FreeIPA: NULL Pointer Dereference in `ipa-enrollment` Extended Operation (`JOIN_OID`) via Missing Request ValueCVE-2026-73199 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastoreCVE-2026-13097 Red Hat Enterprise Linux 6/ipaRed Hat Enterprise Linux 8/ipa Red Hat High No fix reported