Security
فارسی
All products

Red Hat Enterprise Linux 7/ipa

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
freeipa: XSS flaw can be used to escalate privilegesCVE-2014-7850 Red Hat Enterprise Linux 7/ipa Red Hat Medium No fix reported
ipa: Password hash disclosure via 'System: Read Stage Users' permissionCVE-2017-12169 Red Hat Enterprise Linux 7/ipa Red Hat Low No fix reported
ipa: Session not terminated after logoutCVE-2019-14826 Red Hat Enterprise Linux 7/ipaRed Hat Enterprise Linux 8/idm:DL1/ipa Red Hat Low No fix reported
freeipa: specially crafted HTTP requests potentially lead to denial of serviceCVE-2024-1481 Red Hat Enterprise Linux 7/ipa Red Hat Medium No fix reported
freeipa: delegation rules allow a proxy service to impersonate any user to access another target serviceCVE-2024-2698 Red Hat Enterprise Linux 6/ipaRed Hat Enterprise Linux 7/ipa Red Hat High No fix reported
freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorizationCVE-2026-14612 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Low No fix reported
freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writesCVE-2026-19550 Red Hat Enterprise Linux 7/ipa Red Hat High No fix reported
ipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded OTP key decoding/re-encodingCVE-2026-73196 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: FreeIPA: NULL Pointer Dereference in `ipa-enrollment` Extended Operation (`JOIN_OID`) via Missing Request ValueCVE-2026-73199 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
FreeIPA: idm: IdM/FreeIPA Web UI - Client-side open redirect in reset_password.htmlCVE-2026-53683 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: freeIPA: FreeIPA uses subject CN as proof of certificate ownershipCVE-2026-115221 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported