ipa-server-encrypted-dns vulnerabilities (TuxCare)
8 vulnerabilities.
-
ipa-server-encrypted-dnsTuxCare Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url 8.1 High -
ipa-server-encrypted-dnsTuxCare Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service 8.1 High -
ipa-server-encrypted-dnsTuxCare Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci 9.8 Critical -
ipa-server-encrypted-dnsTuxCare Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships 9.6 Critical -
ipa-server-encrypted-dnsTuxCare Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read 7.5 High -
ipa-server-encrypted-dnsTuxCare Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore 8.7 High -
ipa-server-encrypted-dnsTuxCare Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read 7.5 High -
ipa-server-encrypted-dnsTuxCare Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 8.2 High