ipa-debugsource vulnerabilities (Red Hat)

35 vulnerabilities.

• ipa-debugsource Red Hat Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url CVE-2026-18147 8.1 HighSeptember 9, 2026
• ipa-debugsource Red Hat Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service CVE-2026-79678 8.1 HighSeptember 7, 2026
• ipa-debugsource Red Hat Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci CVE-2026-76578 Public exploit 9.8 CriticalSeptember 7, 2026
• ipa-debugsource Red Hat Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships CVE-2026-11861 9.6 CriticalAugust 20, 2026
• ipa-debugsource Red Hat Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read CVE-2026-73198 7.5 HighAugust 20, 2026
• ipa-debugsource Red Hat Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore CVE-2026-13097 8.7 HighAugust 20, 2026
• ipa-debugsource Red Hat Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read CVE-2026-73197 7.5 HighAugust 20, 2026
• ipa-debugsource Red Hat Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes CVE-2026-19550 8.2 HighAugust 11, 2026
• ipa-debugsource Red Hat Python-kdcproxy: remote dos via unbounded tcp upstream buffering CVE-2025-59089 5.9 MediumNovember 12, 2025
• ipa-debugsource Red Hat Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv CVE-2025-59088 8.6 HighNovember 12, 2025
• ipa-debugsource Red Hat Freeipa: idm: privilege escalation from host to domain admin in freeipa CVE-2025-7493 Fix available 9.1 CriticalSeptember 30, 2025
• ipa-debugsource Red Hat Freeipa: idm: privilege escalation from host to domain admin in freeipa CVE-2025-4404 Public exploitFix available 9.1 CriticalJune 17, 2025
• ipa-debugsource Red Hat Freeipa: administrative user data leaked through systemd journal CVE-2024-11029 Fix available 5.5 MediumJanuary 15, 2025
• ipa-debugsource Red Hat Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force CVE-2024-3183 Public exploitFix available 8.1 HighJune 10, 2024
• ipa-debugsource Red Hat Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service CVE-2024-2698 Fix available 8.8 HighJune 10, 2024
• ipa-debugsource Red Hat Freeipa: specially crafted http requests potentially lead to denial of service CVE-2024-1481 Fix available 5.3 MediumMarch 25, 2024
• ipa-debugsource Red Hat JWCrypto vulnerable to JWT bomb Attack in `deserialize` function CVE-2024-28102 Fix available 6.8 MediumMarch 6, 2024
• ipa-debugsource Red Hat Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• ipa-debugsource Red Hat Jwcrypto: denail of service via specifically crafted jwe CVE-2023-6681 Fix available 5.3 MediumDecember 28, 2023
• ipa-debugsource Red Hat A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos... CVE-2020-25719 Fix available 7.2 HighNovember 9, 2021
• ipa-debugsource Red Hat A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the... CVE-2021-3480 Fix available 7.5 HighMay 18, 2021
• ipa-debugsource Red Hat Kerberos KDC Security Feature Bypass Vulnerability CVE-2020-17049 Fix available EPSS 13.8% 6.6 MediumNovember 11, 2020
• ipa-debugsource Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• ipa-debugsource Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• ipa-debugsource Red Hat A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1... CVE-2020-1722 Fix available 5.3 MediumApril 27, 2020
• ipa-debugsource Red Hat Code injection in FreeIPA CVE-2019-14867 Fix available 8.8 HighNovember 27, 2019
• ipa-debugsource Red Hat FreeIPA logs passwords embedded in commands in calls using batch CVE-2019-10195 Fix available 5.7 MediumNovember 27, 2019
• ipa-debugsource Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• ipa-debugsource Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• ipa-debugsource Red Hat bootstrap Cross-site Scripting vulnerability CVE-2018-20677 Fix available 6.1 MediumJanuary 9, 2019
• ipa-debugsource Red Hat XSS vulnerability that affects bootstrap CVE-2018-20676 Fix available 6.1 MediumJanuary 9, 2019
• ipa-debugsource Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2016-10735 Public exploitFix available 6.1 MediumJanuary 9, 2019
• ipa-debugsource Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2018-14042 Public exploitFix available 6.1 MediumJuly 13, 2018
• ipa-debugsource Red Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) CVE-2018-14040 Public exploitFix available 6.1 MediumJuly 13, 2018
• ipa-debugsource Red Hat Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018