Priority MEDIUM 48
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, w…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.07413 · Published 2019-11-27 · Partial fix · 4.6.7, 4.7.4 +1 CWE-400
Priority MEDIUM 44
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00991 · Published 2017-09-21 · No fix listed CWE-200
Priority MEDIUM 43
A flaw was found in FreeIPA.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-08-20 · Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-266
Priority MEDIUM 43
FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01687 · Published 2017-09-27 · No fix listed CWE-384
Priority MEDIUM 42
ipa 3.0 does not properly check server identity before sending credential containing cookies
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01838 · Published 2019-11-25 · No fix listed CWE-565
Priority MEDIUM 41
A privilege escalation flaw was found in FreeIPA.
CVSS 3.1HIGH 8.7· Network · High privileges · No interaction · EPSS 0.00775 · Published 2026-08-20 · Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-706
Priority MEDIUM 40
A flaw was found in FreeIPA.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0054 · Published 2026-08-20 · Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +12 CWE-770
Priority MEDIUM 40
A flaw was found in FreeIPA.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00587 · Published 2026-08-20 · Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-770
Priority MEDIUM 40
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services ru…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04741 · Published 2017-08-28 · Partial fix CWE-255
Priority LOW 39
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00667 · Published 2024-06-12 · Partial fix · 4.11.2, 4.12.1 +4 CWE-863
Priority LOW 38
A vulnerability was found in ipa before 4.4.
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01266 · Published 2018-07-27 · Fixed CWE-732
Priority LOW 37
It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01925 · Published 2018-01-10 · No fix listed CWE-200
Priority LOW 36
A flaw was found in FreeIPA.
CVSS 3.1HIGH 8.2· Network · Low privileges · No interaction · EPSS 0.00483 · Published 2026-08-11 · Fixed in 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-863
Priority LOW 35
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0103 · Published 2017-06-27 · No fix listed CWE-284
Priority LOW 35
FreeIPA might display user data improperly via vectors involving non-printable characters.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01065 · Published 2017-09-20 · No fix listed CWE-20
Priority LOW 34
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02607 · Published 2016-09-07 · Fixed CWE-284
Priority LOW 32
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01806 · Published 2019-11-27 · Partial fix · 4.6.7, 4.7.4 +1 CWE-200
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00574 · Published 2024-01-10 · Partial fix · 4.6.8-5.el7_9.16, 8090020231201152514.3387e3d0 +7 CWE-352
Priority LOW 29
A flaw was found in FreeIPA.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00426 · Published 2026-08-20 · Fix deferred CWE-770
Priority LOW 29
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command.
CVSS 3.0MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00799 · Published 2018-03-13 · Fixed in 4.3.3, 4.4.3 CWE-863
Priority LOW 28
The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a gr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02644 · Published 2015-03-30 · Fixed CWE-19
Priority LOW 26
A flaw was found in all ipa versions 4.x.x through 4.8.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.01073 · Published 2020-04-27 · Partial fix CWE-400
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01864 · Published 2014-11-28 · No fix listed CWE-79
Priority LOW 21
FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anony…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.02072 · Published 2014-11-19 · No fix listed CWE-264
Priority LOW 20
A flaw was found in FreeIPA versions 4.5.0 and later.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00336 · Published 2019-09-17 · Fix deferred CWE-613
THREATIST.IORead the docs