2024-12-31
ALT-BU-2024-17856-1
Branch c9f2 update bulletin.
Closed vulnerabilities
Published: 2024-02-13
BDU:2024-01678
Уязвимость функции run() сценария сервера FreeIPA, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
Severity: MEDIUM (5.3)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References:
Published: 2024-04-11
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2024-1481
A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.
References: