Поиск уязвимостей
Количество 12
Количество 12
GHSA-2rwh-2wx9-4qwh
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently va ...
RLSA-2026:83460
Critical: idm:DL1 security, bug fix, and enhancement update
RLSA-2026:72279
Critical: ipa security, bug fix, and enhancement update
RLSA-2026:70564
Critical: ipa security, bug fix, and enhancement update
ELSA-2026-83460
ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-72279
ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-70564
ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL)
ALT-PU-2026-18151
ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2rwh-2wx9-4qwh A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion. | CVSS3: 8.1 | 1% Низкий | 2 месяца назад |
 | CVE-2026-79678 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion. | CVSS3: 8.1 | 1% Низкий | 2 месяца назад |
 | CVE-2026-79678 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion. | CVSS3: 8.1 | 1% Низкий | 2 месяца назад |
 | CVE-2026-79678 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion. | CVSS3: 8.1 | 1% Низкий | 2 месяца назад |
| CVE-2026-79678 A flaw was found in FreeIPA's idp-add command, where insufficiently va ... | CVSS3: 8.1 | 1% Низкий | 2 месяца назад |
 | RLSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update | 26 дней назад | ||
| RLSA-2026:72279 Critical: ipa security, bug fix, and enhancement update | около 1 месяца назад | ||
| RLSA-2026:70564 Critical: ipa security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-83460 ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL) | 26 дней назад | ||
| ELSA-2026-72279 ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL) | около 1 месяца назад | ||
| ELSA-2026-70564 ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL) | около 2 месяцев назад | ||
| ALT-PU-2026-18151 ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3 | CVSS3: 9.8 | 25 дней назад |
Уязвимостей на страницу