Every CVE Search/ Get API key

CVE-2020-1722

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1...

5.3 MediumFix available

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.07%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-1722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2020-12573 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
EUVD-2020-12573
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-mvj3-pw74-8w47 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1...

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
GHSA-mvj3-pw74-8w47
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-1722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
5.4 MediumAV:N/AC:H/Au:N/C:N/I:N/A:C
Weakness
CWE-400
Updated
2026-11-02
OSV 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-1722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-1722 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2020-1722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-07
Show 5 moreShow less
OSVRHSA-2020:3936 6.1

Red Hat Security Advisory: ipa security, bug fix, and enhancement update

Record
RHSA-2020:3936
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2020:4670 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Record
RHSA-2020:4670
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRLSA-2020:4670 6.1

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

  • js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  • bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4670
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-1722 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2020-1722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2020:4670 No score

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

  • js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  • bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4670
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
custodia
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-custodia
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.5.0-1.module_el8.5.0+2641+983b221b
0.5.0-1.module_el8.5.0+2641+983b221b
python3-jwcrypto
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.5.0-1.module_el8.6.0+2881+2f24dc92
0.5.0-1.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.5.0-1.module_el8.6.0+2737+7e73ea90
0.5.0-1.module_el8.6.0+2737+7e73ea90
python3-kdcproxy
AlmaLinux:8
From an advisory covering 10 CVEs
 before 0.4-5.module_el8.6.0+2881+2f24dc92
0.4-5.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.0.0-9.module_el8.5.0+2641+983b221b
1.0.0-9.module_el8.5.0+2641+983b221b
python3-pyusb
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.0.0-9.module_el8.6.0+2881+2f24dc92
1.0.0-9.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.0.0-9.module_el8.6.0+2737+7e73ea90
1.0.0-9.module_el8.6.0+2737+7e73ea90
python3-qrcode
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
Show 129 moreShow less
Affected packages
PackageAffectedFixed
python3-qrcode
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.5.0+2641+983b221b
5.1-12.module_el8.5.0+2641+983b221b
python3-qrcode
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode-core
AlmaLinux:8
From an advisory covering 10 CVEs
 before 5.1-12.module_el8.5.0+2641+983b221b
5.1-12.module_el8.5.0+2641+983b221b
python3-yubico
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.3.2-9.module_el8.5.0+2641+983b221b
1.3.2-9.module_el8.5.0+2641+983b221b
python3-yubico
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.3.2-9.module_el8.6.0+2737+7e73ea90
1.3.2-9.module_el8.6.0+2737+7e73ea90
python3-yubico
AlmaLinux:8
From an advisory covering 10 CVEs
 before 1.3.2-9.module_el8.6.0+2881+2f24dc92
1.3.2-9.module_el8.6.0+2881+2f24dc92
freeipa
Debian:12
 before 4.8.8-2
4.8.8-2
freeipa
Debian:13
 before 4.8.8-2
4.8.8-2
freeipa
Debian:14
 before 4.8.8-2
4.8.8-2
ipa
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::computenode
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-epn
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.4-6.module+el8.3.0+7711+c4441980
0:0.4-6.module+el8.3.0+7711+c4441980
ipa-healthcheck-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.4-6.module+el8.3.0+7711+c4441980
0:0.4-6.module+el8.3.0+7711+c4441980
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
opendnssec
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.5.0-1.module+el8.1.0+4107+4a66eb87
0:0.5.0-1.module+el8.1.0+4107+4a66eb87
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:5.1-12.module+el8.1.0+4107+4a66eb87
0:5.1-12.module+el8.1.0+4107+4a66eb87
python-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:1.3.2-9.module+el8.1.0+4107+4a66eb87
0:1.3.2-9.module+el8.1.0+4107+4a66eb87
python3-custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
python3-ipalib
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.5.0-1.module+el8.1.0+4107+4a66eb87
0:0.5.0-1.module+el8.1.0+4107+4a66eb87
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:1.0.0-9.module+el8.1.0+4107+4a66eb87
0:1.0.0-9.module+el8.1.0+4107+4a66eb87
python3-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:5.1-12.module+el8.1.0+4107+4a66eb87
0:5.1-12.module+el8.1.0+4107+4a66eb87
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:5.1-12.module+el8.1.0+4107+4a66eb87
0:5.1-12.module+el8.1.0+4107+4a66eb87
python3-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:1.3.2-9.module+el8.1.0+4107+4a66eb87
0:1.3.2-9.module+el8.1.0+4107+4a66eb87
pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:1.0.0-9.module+el8.1.0+4107+4a66eb87
0:1.0.0-9.module+el8.1.0+4107+4a66eb87
slapi-nis
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a
0:0.56.5-4.module+el8.3.0+8222+c1bff54a
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a
0:0.56.5-4.module+el8.3.0+8222+c1bff54a
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a
0:0.56.5-4.module+el8.3.0+8222+c1bff54a
softhsm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.6.0-3.module+el8.3.0+6909+fb33717d
0:2.6.0-3.module+el8.3.0+6909+fb33717d
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.6.0-3.module+el8.3.0+6909+fb33717d
0:2.6.0-3.module+el8.3.0+6909+fb33717d
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.6.0-3.module+el8.3.0+6909+fb33717d
0:2.6.0-3.module+el8.3.0+6909+fb33717d
softhsm-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:2.6.0-3.module+el8.3.0+6909+fb33717d
0:2.6.0-3.module+el8.3.0+6909+fb33717d
custodia
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:0.6.0-3.module+el8.4.0+429+6bd33fea
0:0.6.0-3.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:0.5.0-1.module+el8.4.0+429+6bd33fea
0:0.5.0-1.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
python-kdcproxy
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:0.4-5.module+el8.3.0+244+0b2ae752
0:0.4-5.module+el8.3.0+244+0b2ae752
python-qrcode
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:5.1-12.module+el8.4.0+429+6bd33fea
0:5.1-12.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:1.3.2-9.module+el8.4.0+429+6bd33fea
0:1.3.2-9.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
pyusb
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:1.0.0-9.module+el8.4.0+429+6bd33fea
0:1.0.0-9.module+el8.4.0+429+6bd33fea
pyusb
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
freeipa
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
 None known
freeipa
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
 None known
freeipa
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
 None known
freeipa
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
 None known
freeipa
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
 None known
freeipa
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.10.2-14.10.2-24.10.2-2ubuntu34.11.1-14.11.1-2
 None known
freeipa
Ubuntu:25.10
 All versions, plus listed versions
4.12.2-34.12.4-1
 None known
freeipa
Ubuntu:26.10
 All versions, plus listed versions
4.13.1-14.13.1-1build1
 None known
freeipa
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.12.4-14.12.4-24.13.1-1
 None known

History

History
RecordedChangedSources
affectedOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-1722 is a medium vulnerability (CVSS 5.3) in Red Hat Ipa, published April 27, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. Fixed in freeipa 4.8.8-2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open