Red Hat Security Advisory

RHSA-2024:0143

idm:DL1 security update

Released 2024-01-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.6-4.module+el8.9.0+18911+94941f82.aarch64::idm:DL1, bind-dyndb-ldap-11.6-4.module+el8.9.0+18911+94941f82.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-4.module+el8.9.0+18911+94941f82.s390x::idm:DL1 +47

Fixes 2 records

TI-2020-13032 CVE-2020-17049 · GHSA-g2p3-j47p-8cwj

Kerberos KDC Security Feature Bypass Vulnerability

MEDIUM 49

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13794 Published 2020-11-11 Partial fix · 10.0.17763.2061, publication +6 CWE-863

TI-2023-05020 CVE-2023-5455 · GHSA-45hh-rj6v-548f

Ipa: invalid csrf protection

LOW 30

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00574 Published 2024-01-10 Partial fix · 4.6.8-5.el7_9.16, 8090020231201152514.3387e3d0 +7 CWE-352