Red Hat Security AdvisoryRHSA-2024:3755
idm:DL1 security update
Released 2024-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.aarch64::idm:DL1, bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-5.module+el8.10.0+21691+df63127d.s390x::idm:DL1 +47
Fixes 2 records
Priority MEDIUM 41
A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02053 · Published 2024-06-12 · Fixed in 4.12.1, 4.6.8-5.el7_9.17 +8 CWE-916
Priority LOW 39
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00667 · Published 2024-06-12 · Partial fix · 4.11.2, 4.12.1 +4 CWE-863
