Lucene search
+L

882 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-7030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of...

7.5CVSS6.5AI score0.047EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-14826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain...

5.6CVSS6.2AI score0.00336EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/01/27 12:00 a.m.16 views

Fedora 41 : freeipa (2025-b21777d1b5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b21777d1b5 advisory. CVE-2024-11029 Release note: https://www.freeipa.org/release-notes/4-12-3.html Tenable has extracted the preceding description block directly from the Fedora...

5.5CVSS5.7AI score0.00231EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/27 12:00 a.m.29 views

Fedora 40 : freeipa (2025-6baf694c75)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6baf694c75 advisory. CVE-2024-11029 Release note: https://www.freeipa.org/release-notes/4-12-3.html Tenable has extracted the preceding description block directly from the Fedora...

5.5CVSS5.7AI score0.00231EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/01/27 12:00 a.m.10 views

Fedora: Security Advisory (FEDORA-2025-6baf694c75)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.1AI score0.00231EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/01/22 4:03 a.m.7 views

SUSE CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/01/18 12:00 a.m.12 views

AlmaLinux 9 : ipa (ALSA-2025:0334)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0334 advisory. freeipa: Administrative user data leaked through systemd journal CVE-2024-11029 Tenable has extracted the preceding description block directly from the AlmaLinux...

5.5CVSS5.7AI score0.00231EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/01/15 1:57 p.m.12 views

freeipa: Administrative user data leaked through systemd journal

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.8AI score0.00231EPSS
SaveExploits0References4
NVD
NVD
added 2025/01/15 1:15 p.m.19 views

CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS0.00231EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/15 1:15 p.m.8 views

DEBIAN-CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.6AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/15 1:15 p.m.14 views

CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2025/01/15 1:15 p.m.8 views

UBUNTU-CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.8AI score0.00231EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/15 12:55 p.m.142 views

CVE-2024-11029

CVE-2024-11029 is a real vulnerability affecting FreeIPA via an API audit flaw that leaks administrator credentials to systemd journal when the FreeIPA installation process logs the full command line. Connected advisories confirm affected packages (FreeIPA) across multiple distributions (e.g., Fe...

5.5CVSS5.5AI score0.00231EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/15 12:55 p.m.22 views

CVE-2024-11029 Freeipa: administrative user data leaked through systemd journal

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS0.00231EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/01/15 12:55 p.m.14 views

CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.6AI score0.00231EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/01/15 12:55 p.m.16 views

CVE-2024-11029 Freeipa: administrative user data leaked through systemd journal

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.5AI score0.00231EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/01/15 12:54 p.m.28 views

CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

5.5CVSS5.4AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.16 views

Red Hat FreeIPA 安全漏洞

Red Hat FreeIPA is a suite of integrated security information management solutions from Red Hat USA. The product provides identity management, policy management, and audit management IPA capabilities for Linux and Unix computer networks. A security vulnerability exists in Red Hat FreeIPA that...

5.5CVSS5.3AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/15 12:00 a.m.8 views

PT-2025-1618 · Freeipa +4 · Freeipa +4

Name of the Vulnerable Software and Affected Versions: FreeIPA affected versions not specified Description: A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the...

5.5CVSS6.6AI score0.00231EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
added 2024/11/14 12:00 a.m.13 views

Fedora 41 : freeipa (2024-d7b9fbb2a5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d7b9fbb2a5 advisory. Automatic update for freeipa-4.11.1-4.fc41. Changelog Wed Feb 21 2024 Rob Crittenden - 4.11.1-4 - Security release: CVE-2024-1481 - Resolves: rhbz2265129...

5.3CVSS6.4AI score0.0111EPSS
SaveExploits1References2
Rows per page
Query Builder