ipa-selinux vulnerabilities (TuxCare)
12 vulnerabilities.
ipa-selinuxTuxCareFreeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url8.1 Highipa-selinuxTuxCareFreeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service8.1 Highipa-selinuxTuxCareIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci9.8 Criticalipa-selinuxTuxCareFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships9.6 Criticalipa-selinuxTuxCareIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read7.5 Highipa-selinuxTuxCareIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore8.7 Highipa-selinuxTuxCareIpa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read7.5 Highipa-selinuxTuxCareFreeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes8.2 Highipa-selinuxTuxCareFreeipa: idm: privilege escalation from host to domain admin in freeipa9.1 Criticalipa-selinuxTuxCareFreeipa: administrative user data leaked through systemd journal5.5 Mediumipa-selinuxTuxCareFreeipa: specially crafted http requests potentially lead to denial of service5.3 Mediumipa-selinuxTuxCareIpa: invalid csrf protection6.5 Medium