Поиск уязвимостей
Количество 9
Количество 9
CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
CVE-2024-11029
A flaw was found in the FreeIPA API audit, where it sends the whole Fr ...
GHSA-45q7-xhfm-xqjp
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
ELSA-2025-0334
ELSA-2025-0334: ipa security update (MODERATE)
BDU:2026-06677
Уязвимость программного обеспечения централизованного управления идентификацией FreeIPA, позволяющая нарушителю получить доступ к конфиденциальным данным
ALT-PU-2025-1456
ALT-PU-2025-1456: package `freeipa` update to version 4.9.14-alt2.p10.1
ALT-PU-2025-1448
ALT-PU-2025-1448: package `freeipa` update to version 4.12.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials. | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
 | CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials. | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
 | CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials. | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole Fr ... | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| GHSA-45q7-xhfm-xqjp A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials. | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| ELSA-2025-0334 ELSA-2025-0334: ipa security update (MODERATE) | 0% Низкий | почти 2 года назад | |
 | BDU:2026-06677 Уязвимость программного обеспечения централизованного управления идентификацией FreeIPA, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| ALT-PU-2025-1456 ALT-PU-2025-1456: package `freeipa` update to version 4.9.14-alt2.p10.1 | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| ALT-PU-2025-1448 ALT-PU-2025-1448: package `freeipa` update to version 4.12.3-alt1 | CVSS3: 8.7 | почти 2 года назад |
Уязвимостей на страницу