ipa-server vulnerabilities (Red Hat)
55 vulnerabilities.
-
ipa-serverRed Hat Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url 8.1 High -
ipa-serverRed Hat Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service 8.1 High -
ipa-serverRed Hat Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci 9.8 Critical -
ipa-serverRed Hat Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships 9.6 Critical -
ipa-serverRed Hat Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read 7.5 High -
ipa-serverRed Hat Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore 8.7 High -
ipa-serverRed Hat Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read 7.5 High -
ipa-serverRed Hat Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 8.2 High -
ipa-serverRed Hat Python-kdcproxy: remote dos via unbounded tcp upstream buffering 5.9 Medium -
ipa-serverRed Hat Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 8.6 High -
ipa-serverRed Hat Freeipa: idm: privilege escalation from host to domain admin in freeipa 9.1 Critical -
ipa-serverRed Hat Freeipa: idm: privilege escalation from host to domain admin in freeipa 9.1 Critical -
ipa-serverRed Hat Freeipa: administrative user data leaked through systemd journal 5.5 Medium -
ipa-serverRed Hat Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 8.1 High -
ipa-serverRed Hat Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 8.8 High -
ipa-serverRed Hat Freeipa: specially crafted http requests potentially lead to denial of service 5.3 Medium -
ipa-serverRed Hat JWCrypto vulnerable to JWT bomb Attack in `deserialize` function 6.8 Medium -
ipa-serverRed Hat Ipa: invalid csrf protection 6.5 Medium -
ipa-serverRed Hat Jwcrypto: denail of service via specifically crafted jwe 5.3 Medium -
ipa-serverRed Hat A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos... 7.2 High -
ipa-serverRed Hat A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the... 7.5 High -
ipa-serverRed Hat Kerberos KDC Security Feature Bypass Vulnerability 6.6 Medium -
ipa-serverRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
ipa-serverRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
ipa-serverRed Hat A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1... 5.3 Medium -
ipa-serverRed Hat Code injection in FreeIPA 8.8 High -
ipa-serverRed Hat FreeIPA logs passwords embedded in commands in calls using batch 5.7 Medium -
ipa-serverRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
ipa-serverRed Hat Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
ipa-serverRed Hat bootstrap Cross-site Scripting vulnerability 6.1 Medium -
ipa-serverRed Hat XSS vulnerability that affects bootstrap 6.1 Medium -
ipa-serverRed Hat Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
ipa-serverRed Hat A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did... 8.1 High -
ipa-serverRed Hat Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
ipa-serverRed Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) 6.1 Medium -
ipa-serverRed Hat Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's... 6.3 Medium -
ipa-serverRed Hat Cross-Site Scripting (XSS) in jquery 6.1 Medium -
ipa-serverRed Hat FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication... 7.5 High -
ipa-serverRed Hat The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which... 6.5 Medium -
ipa-serverRed Hat The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before... 7.5 High -
ipa-serverRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB... 5.9 Medium -
ipa-serverRed Hat The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before... 5.9 Medium -
ipa-serverRed Hat Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509... 7.4 High -
ipa-serverRed Hat The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x... 5.9 Medium -
ipa-serverRed Hat The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4... 6.3 Medium -
ipa-serverRed Hat The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,... 5.9 Medium -
ipa-serverRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly... 5.9 Medium -
ipa-serverRed Hat The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly... 5.0 Medium -
ipa-serverRed Hat The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user... 7.8 High -
ipa-serverRed Hat jquery-ui Tooltip widget vulnerable to XSS 4.3 Medium - Show olderLoading…