Every CVE Search/ Get API key

CVE-2019-10195

FreeIPA logs passwords embedded in commands in calls using batch

5.7 MediumFix available

CVE-2019-10195 is a medium vulnerability (CVSS 5.7) in Freeipa, published November 27, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. Fixed in freeipa 4.6.7.

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.81%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.7

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
CVE-2019-10195
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-532, CWE-200
Updated
2026-11-02
EUVDEUVD-2019-0056 5.7

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
EUVD-2019-0056
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-w4q7-f34x-vpgc 6.9

FreeIPA logs passwords embedded in commands in calls using batch

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
GHSA-w4q7-f34x-vpgc
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
NVD 6.5

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
CVE-2019-10195
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-200, CWE-532
Updated
2026-11-02
OSV 6.5

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
CVE-2019-10195
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-10195 6.5

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
DEBIAN-CVE-2019-10195
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVGHSA-w4q7-f34x-vpgc 6.9

FreeIPA logs passwords embedded in commands in calls using batch

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
GHSA-w4q7-f34x-vpgc
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVRHBA-2019:4268 8.8

Red Hat Bug Fix Advisory: idm:DL1 bug fix update

Record
RHBA-2019:4268
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0378 8.8

Red Hat Security Advisory: ipa security and bug fix update

Record
RHSA-2020:0378
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1269 8.8

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2020:1269
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-10195 6.5

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
UBUNTU-CVE-2019-10195
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0
5.7 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALBA-2019:4268 No score

idm:DL1 bug fix update

Bug Fix(es):

  • IPA upgrade fails for latest ipa package when adtrust is installed (BZ#1773516)
Record
ALBA-2019:4268
Updated
2026-11-02
OSVPYSEC-2019-168 No score

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
PYSEC-2019-168
Updated
2026-11-02
OSVPYSEC-2019-22 No score

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.

Record
PYSEC-2019-22
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeipa
PyPI
 4.6.0 up to 4.6.7
4.6.7
freeipa
PyPI
 4.7.0 up to 4.7.4
4.7.4
freeipa
PyPI
 4.8.0 up to 4.8.3
4.8.3
ipa
PyPI
 4.6.0 up to 4.6.7
4.6.7
ipa
PyPI
 4.7.0 up to 4.7.4
4.7.4
ipa
PyPI
 4.8.0 up to 4.8.3
4.8.3
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
Show 174 moreShow less
Affected packages
PackageAffectedFixed
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.5.0+2603+92118e57
0.5.0-1.module_el8.5.0+2603+92118e57
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2881+2f24dc92
0.5.0-1.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2737+7e73ea90
0.5.0-1.module_el8.6.0+2737+7e73ea90
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.5.0+2603+92118e57
1.0.0-9.module_el8.5.0+2603+92118e57
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2881+2f24dc92
1.0.0-9.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2737+7e73ea90
1.0.0-9.module_el8.6.0+2737+7e73ea90
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2737+7e73ea90
1.3.2-9.module_el8.6.0+2737+7e73ea90
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2881+2f24dc92
1.3.2-9.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.5.0+2603+92118e57
1.3.2-9.module_el8.5.0+2603+92118e57
freeipa
Debian:12
 before 4.8.3-1
4.8.3-1
freeipa
Debian:13
 before 4.8.3-1
4.8.3-1
freeipa
PyPI
 4.6.0 up to 4.6.7, plus listed versions
4.6.14.6.24.6.34.6.44.6.5
4.6.7
freeipa
PyPI
 4.7.0 up to 4.7.4, plus listed versions
4.7.14.7.2
4.7.4
freeipa
PyPI
 4.8.0 up to 4.8.3, plus listed versions
4.8.14.8.2
4.8.3
ipa
PyPI
 4.6.0 up to 4.6.7, plus listed versions
4.6.24.6.34.6.44.6.5
4.6.7
ipa
PyPI
 4.7.0 up to 4.7.4, plus listed versions
4.7.14.7.2
4.7.4
ipa
PyPI
 4.8.0 up to 4.8.3, plus listed versions
4.8.14.8.2
4.8.3
ipa
PyPI
 4.6.0 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions
4.6.24.6.34.6.44.6.54.7.14.7.24.8.14.8.2
4.6.74.7.44.8.3
freeipa
PyPI
 4.6.1 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions
4.6.24.6.34.6.44.6.54.7.14.7.24.8.14.8.2
4.6.74.7.44.8.3
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
 before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
 before 0:0.3-4.module+el8.1.0+4098+f286395e
0:0.3-4.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof
Red Hat:enterprise_linux:8::appstream
 before 0:0.0.4-6.module+el8.1.0+4098+f286395e
0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof-plugin
Red Hat:enterprise_linux:8::appstream
 before 0:0.0.4-6.module+el8.1.0+4098+f286395e
0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
opendnssec
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-1.module+el8.1.0+4098+f286395e
0:0.5.0-1.module+el8.1.0+4098+f286395e
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-3.module+el8.1.0+4098+f286395e
0:0.4-3.module+el8.1.0+4098+f286395e
python-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.module+el8.1.0+4098+f286395e
0:1.3.2-9.module+el8.1.0+4098+f286395e
python3-custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-ipalib
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-1.module+el8.1.0+4098+f286395e
0:0.5.0-1.module+el8.1.0+4098+f286395e
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-3.module+el8.1.0+4098+f286395e
0:0.4-3.module+el8.1.0+4098+f286395e
python3-pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.module+el8.1.0+4098+f286395e
0:1.0.0-9.module+el8.1.0+4098+f286395e
python3-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.module+el8.1.0+4098+f286395e
0:1.3.2-9.module+el8.1.0+4098+f286395e
pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.module+el8.1.0+4098+f286395e
0:1.0.0-9.module+el8.1.0+4098+f286395e
slapi-nis
Red Hat:enterprise_linux:8::appstream
 before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
softhsm
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::client
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::server
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
bind-dyndb-ldap
Red Hat:rhel_e4s:8.0::appstream
 before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
bind-dyndb-ldap-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
bind-dyndb-ldap-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
custodia
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.6.0-2.module+el8+2555+b334d87b
0:0.6.0-2.module+el8+2555+b334d87b
ipa
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client-common
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-common
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-idoverride-memberof
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.0.4-6.module+el8+2555+b334d87b
0:0.0.4-6.module+el8+2555+b334d87b
ipa-idoverride-memberof-plugin
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.0.4-6.module+el8+2555+b334d87b
0:0.0.4-6.module+el8+2555+b334d87b
ipa-python-compat
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-common
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-dns
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-trust-ad
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-trust-ad-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
opendnssec
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
opendnssec-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
opendnssec-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
python-jwcrypto
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.5.0-1.module+el8+2555+b334d87b
0:0.5.0-1.module+el8+2555+b334d87b
python-kdcproxy
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.4-3.module+el8+2555+b334d87b
0:0.4-3.module+el8+2555+b334d87b
python-qrcode
Red Hat:rhel_e4s:8.0::appstream
 before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python-yubico
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.3.2-9.module+el8+2555+b334d87b
0:1.3.2-9.module+el8+2555+b334d87b
python3-custodia
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.6.0-2.module+el8+2555+b334d87b
0:0.6.0-2.module+el8+2555+b334d87b
python3-ipaclient
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-ipalib
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-ipaserver
Red Hat:rhel_e4s:8.0::appstream
 before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-jwcrypto
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.5.0-1.module+el8+2555+b334d87b
0:0.5.0-1.module+el8+2555+b334d87b
python3-kdcproxy
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.4-3.module+el8+2555+b334d87b
0:0.4-3.module+el8+2555+b334d87b
python3-pyusb
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.0.0-9.module+el8+2555+b334d87b
0:1.0.0-9.module+el8+2555+b334d87b
python3-qrcode
Red Hat:rhel_e4s:8.0::appstream
 before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python3-qrcode-core
Red Hat:rhel_e4s:8.0::appstream
 before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python3-yubico
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.3.2-9.module+el8+2555+b334d87b
0:1.3.2-9.module+el8+2555+b334d87b
pyusb
Red Hat:rhel_e4s:8.0::appstream
 before 0:1.0.0-9.module+el8+2555+b334d87b
0:1.0.0-9.module+el8+2555+b334d87b
slapi-nis
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
slapi-nis-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
slapi-nis-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
softhsm
Red Hat:rhel_e4s:8.0::appstream
 before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-devel
Red Hat:rhel_e4s:8.0::appstream
 before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
freeipa
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
 None known
freeipa
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
 None known
freeipa
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
 None known
freeipa
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
 None known
freeipa
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
 None known

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open