ALT-PU-2018-1424-1
Closed vulnerabilities
Published: 2017-09-28
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2017-11191
FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Severity: HIGH (8.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References: