Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat IPA — RHSA-2020:0378 Clear all filters
TI-2019-11071 CVE-2019-14867 · GHSA-7hpj-hfcr-5qwm

Uncontrolled resource consumption in Red Hat ipa

Priority MEDIUM 48

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, w…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07413 Published 2019-11-27 Partial fix · 4.6.7, 4.7.4 +1 CWE-400
TI-2019-07516 CVE-2019-10195 · GHSA-w4q7-f34x-vpgc

Information disclosure in Red Hat IPA

Priority LOW 32

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01806 Published 2019-11-27 Partial fix · 4.6.7, 4.7.4 +1 CWE-200