RSS   Vulnerabilities for 'Freeipa'   RSS

2019-09-17
 
CVE-2019-14826

CWE-613
 

 
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

 
2018-07-27
 
CVE-2017-2590

CWE-275
 

 
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.

 
2018-03-13
 
CVE-2016-9575

CWE-285
 

 
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

 
2018-01-10
 
CVE-2017-12169

CWE-200
 

 
It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.

 
2017-09-27
 
CVE-2017-11191

 

 
** DISPUTED ** FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern.

 
2017-09-21
 
CVE-2015-5284

 

 
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

 
2017-09-20
 
CVE-2015-5179

 

 
FreeIPA might display user data improperly via vectors involving non-printable characters.

 
2017-08-28
 
CVE-2016-7030

CWE-255
 

 
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.

 
2017-06-27
 
CVE-2016-5414

 

 
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.

 
2016-09-07
 
CVE-2016-5404

 

 
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.

 


Copyright 2019, cxsecurity.com

 

Back to Top