ipa-selinux-nfast vulnerabilities (TuxCare)
8 vulnerabilities.
ipa-selinux-nfastTuxCareFreeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url8.1 Highipa-selinux-nfastTuxCareFreeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service8.1 Highipa-selinux-nfastTuxCareIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci9.8 Criticalipa-selinux-nfastTuxCareFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships9.6 Criticalipa-selinux-nfastTuxCareIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read7.5 Highipa-selinux-nfastTuxCareIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore8.7 Highipa-selinux-nfastTuxCareIpa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read7.5 Highipa-selinux-nfastTuxCareFreeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes8.2 High