CVE-2024-2698
High · 7.1CVSS
7.1
EPSS
0.7%
Published
Jun 12, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A configuration check meant to limit which services can be accessed on behalf of other users stopped working, allowing some requests to succeed that should have been blocked.
Chainable
- Exploitation
- Remote Authenticated
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Privilege Gain
- Component
- Application
- Class
- Authorization Bypass
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The ipadb_match_acl() change in FreeIPA 4.11.0 incorrectly applies the delegation ACL check for both NULL and non-NULL target service arguments, causing the KDC to grant S4U2Proxy tickets without verifying service delegation rules.
Why it matters to the business
Attackers can obtain service tickets for arbitrary services on behalf of other users, expanding unauthorized access across the identity realm and increasing risk of lateral movement or data exposure.
How an attack unfolds
An attacker with a valid user principal sends an S4U2Self request followed by an S4U2Proxy request to the KDC; because the ACL check now passes regardless of target service, the KDC issues a forwardable ticket for any service without requiring an explicit delegation rule.
How to fix it
Upgrade FreeIPA to the commit 66fd76a9f36213cb4e2bb41bf44653f15af26d6c or later; verify the patched ipadb_match_acl() logic is present after upgrade.
How to confirm the fix worked
Confirm the running FreeIPA version or source contains commit 66fd76a9f36213cb4e2bb41bf44653f15af26d6c; test S4U2Proxy requests against known delegation rules to ensure denials are enforced.
Typical attack path
- Obtain valid user credentials or TGT in the FreeIPA realm
- Issue S4U2Self to obtain a service ticket for the target user
- Issue S4U2Proxy request naming an arbitrary target service
- Receive forwardable ticket bypassing configured delegation ACLs
- Use the ticket to authenticate to the target service as the impersonated user
How to detect it
Search KDC audit logs for S4U2Proxy operations that succeed without matching delegation-rule entries; correlate with client principals issuing requests to services outside their normal delegation scope.
What your security team should do
- Apply the fixed commit or newer FreeIPA package immediately on all KDCs
- Review and tighten existing service delegation rules in ipa service-delegation-rule commands
- Monitor KDC logs for unexpected S4U2Proxy grants after patching
- Test impersonation flows in a staging realm before production rollout
The record
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bind-dyndb-ldap | 0 | 11.6-5.module_el8.10.0+3844+20e075e5.alma.2 |
| AlmaLinux:8 | custodia | 0 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | ipa-client | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-client-common | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-client-epn | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-client-samba | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-common | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-healthcheck | 0 | 0.12-3.module_el8.9.0+3651+d05ea4c5 |
| AlmaLinux:8 | ipa-healthcheck-core | 0 | 0.12-3.module_el8.9.0+3651+d05ea4c5 |
| AlmaLinux:8 | ipa-python-compat | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-selinux | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-server | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-server-common | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-server-dns | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | ipa-server-trust-ad | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | opendnssec | 0 | 2.1.7-1.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | opendnssec | 0 | 2.1.7-1.module_el8.6.0+3031+2f24dc92 |
| AlmaLinux:8 | python3-custodia | 0 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | python3-ipaclient | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | python3-ipalib | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | python3-ipaserver | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | python3-ipatests | 0 | 4.9.13-10.module_el8.10.0+3857+9c8da539 |
| AlmaLinux:8 | python3-jwcrypto | 0 | 0.5.0-2.module_el8.10.0+3844+20e075e5 |
| AlmaLinux:8 | python3-kdcproxy | 0 | 0.4-5.module_el8.9.0+3785+2238a12a |
| AlmaLinux:8 | python3-pyusb | 0 | 1.0.0-9.1.module_el8.7.0+3349+cfeff52e |
| AlmaLinux:8 | python3-qrcode | 0 | 5.1-12.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | python3-qrcode-core | 0 | 5.1-12.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | python3-yubico | 0 | 1.3.2-9.1.module_el8.7.0+3349+cfeff52e |
| AlmaLinux:8 | slapi-nis | 0 | 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1 |
| AlmaLinux:8 | softhsm | 0 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | softhsm | 0 | 2.6.0-5.module_el8.6.0+3031+2f24dc92 |
| AlmaLinux:8 | softhsm-devel | 0 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux:8 | softhsm-devel | 0 | 2.6.0-5.module_el8.6.0+3031+2f24dc92 |
| AlmaLinux:9 | ipa-client | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-client-common | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-client-epn | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-client-samba | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-common | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-selinux | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-server | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-server-common | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-server-dns | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | ipa-server-trust-ad | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | python3-ipaclient | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | python3-ipalib | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | python3-ipaserver | 0 | 4.11.0-15.el9_4.alma.1 |
| AlmaLinux:9 | python3-ipatests | 0 | 4.11.0-15.el9_4.alma.1 |
| Debian:12 | freeipa | 0 | No fix |
| Debian:13 | freeipa | 0 | 4.12.2-1 |
| Debian:14 | freeipa | 0 | 4.12.2-1 |
| Red Hat:enterprise_linux:8::appstream | bind-dyndb-ldap | 0 | 0:11.6-5.module+el8.10.0+21691+df63127d |
| Red Hat:enterprise_linux:8::appstream | bind-dyndb-ldap-debuginfo | 0 | 0:11.6-5.module+el8.10.0+21691+df63127d |
| Red Hat:enterprise_linux:8::appstream | bind-dyndb-ldap-debugsource | 0 | 0:11.6-5.module+el8.10.0+21691+df63127d |
| Red Hat:enterprise_linux:8::appstream | custodia | 0 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | ipa | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-client | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-client-common | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-client-debuginfo | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-client-epn | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-client-samba | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-common | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-debuginfo | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-debugsource | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-healthcheck | 0 | 0:0.12-3.module+el8.9.0+19634+c162f948 |
| Red Hat:enterprise_linux:8::appstream | ipa-healthcheck-core | 0 | 0:0.12-3.module+el8.9.0+19634+c162f948 |
| Red Hat:enterprise_linux:8::appstream | ipa-python-compat | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-selinux | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server-common | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server-debuginfo | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server-dns | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server-trust-ad | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | ipa-server-trust-ad-debuginfo | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | opendnssec | 0 | 0:2.1.7-1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | opendnssec-debuginfo | 0 | 0:2.1.7-1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | opendnssec-debugsource | 0 | 0:2.1.7-1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python-jwcrypto | 0 | 0:0.5.0-2.module+el8.10.0+21691+df63127d |
| Red Hat:enterprise_linux:8::appstream | python-kdcproxy | 0 | 0:0.4-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python-qrcode | 0 | 0:5.1-12.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python-yubico | 0 | 0:1.3.2-9.1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-custodia | 0 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-ipaclient | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | python3-ipalib | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | python3-ipaserver | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | python3-ipatests | 0 | 0:4.9.13-10.module+el8.10.0+21944+3943ad77 |
| Red Hat:enterprise_linux:8::appstream | python3-jwcrypto | 0 | 0:0.5.0-2.module+el8.10.0+21691+df63127d |
| Red Hat:enterprise_linux:8::appstream | python3-kdcproxy | 0 | 0:0.4-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-pyusb | 0 | 0:1.0.0-9.1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-qrcode | 0 | 0:5.1-12.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-qrcode-core | 0 | 0:5.1-12.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | python3-yubico | 0 | 0:1.3.2-9.1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | pyusb | 0 | 0:1.0.0-9.1.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | slapi-nis | 0 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd |
| Red Hat:enterprise_linux:8::appstream | slapi-nis-debuginfo | 0 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd |
| Red Hat:enterprise_linux:8::appstream | slapi-nis-debugsource | 0 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd |
| Red Hat:enterprise_linux:8::appstream | softhsm | 0 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | softhsm-debuginfo | 0 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | softhsm-debugsource | 0 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:8::appstream | softhsm-devel | 0 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 |
| Red Hat:enterprise_linux:9::appstream | ipa | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-client | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-client-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-client-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-client-epn | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-client-samba | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-debugsource | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-selinux | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server-dns | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server-trust-ad | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | ipa-server-trust-ad-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-ipaclient | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-ipalib | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-ipaserver | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-ipatests | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-client | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-client-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-client-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-client-epn | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-client-samba | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-debugsource | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-selinux | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server-common | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server-dns | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server-trust-ad | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | ipa-server-trust-ad-debuginfo | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-ipaclient | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-ipalib | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-ipaserver | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-ipatests | 0 | 0:4.11.0-15.el9_4 |
| Red Hat:rhel_eus:8.8::appstream | bind-dyndb-ldap | 0 | 0:11.6-4.module+el8.8.0+21675+157fa23b.2 |
| Red Hat:rhel_eus:8.8::appstream | bind-dyndb-ldap-debuginfo | 0 | 0:11.6-4.module+el8.8.0+21675+157fa23b.2 |
| Red Hat:rhel_eus:8.8::appstream | bind-dyndb-ldap-debugsource | 0 | 0:11.6-4.module+el8.8.0+21675+157fa23b.2 |
| Red Hat:rhel_eus:8.8::appstream | custodia | 0 | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
| Red Hat:rhel_eus:8.8::appstream | ipa | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-client | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-client-common | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-client-debuginfo | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-client-epn | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-client-samba | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-common | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-debuginfo | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-debugsource | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-healthcheck | 0 | 0:0.12-1.module+el8.8.0+17582+6bf5bf91 |
| Red Hat:rhel_eus:8.8::appstream | ipa-healthcheck-core | 0 | 0:0.12-1.module+el8.8.0+17582+6bf5bf91 |
| Red Hat:rhel_eus:8.8::appstream | ipa-python-compat | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-selinux | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server-common | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server-debuginfo | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server-dns | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server-trust-ad | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | ipa-server-trust-ad-debuginfo | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | opendnssec | 0 | 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 |
| Red Hat:rhel_eus:8.8::appstream | opendnssec-debuginfo | 0 | 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 |
| Red Hat:rhel_eus:8.8::appstream | opendnssec-debugsource | 0 | 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 |
| Red Hat:rhel_eus:8.8::appstream | python-jwcrypto | 0 | 0:0.5.0-1.1.module+el8.7.0+15842+306cbc83 |
| Red Hat:rhel_eus:8.8::appstream | python-kdcproxy | 0 | 0:0.4-5.module+el8.2.0+4691+a05b2456 |
| Red Hat:rhel_eus:8.8::appstream | python-qrcode | 0 | 0:5.1-12.module+el8.1.0+4098+f286395e |
| Red Hat:rhel_eus:8.8::appstream | python-yubico | 0 | 0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5 |
| Red Hat:rhel_eus:8.8::appstream | python3-custodia | 0 | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
| Red Hat:rhel_eus:8.8::appstream | python3-ipaclient | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | python3-ipalib | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | python3-ipaserver | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | python3-ipatests | 0 | 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1 |
| Red Hat:rhel_eus:8.8::appstream | python3-jwcrypto | 0 | 0:0.5.0-1.1.module+el8.7.0+15842+306cbc83 |
| Red Hat:rhel_eus:8.8::appstream | python3-kdcproxy | 0 | 0:0.4-5.module+el8.2.0+4691+a05b2456 |
| Red Hat:rhel_eus:8.8::appstream | python3-pyusb | 0 | 0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5 |
| Red Hat:rhel_eus:8.8::appstream | python3-qrcode | 0 | 0:5.1-12.module+el8.1.0+4098+f286395e |
| Red Hat:rhel_eus:8.8::appstream | python3-qrcode-core | 0 | 0:5.1-12.module+el8.1.0+4098+f286395e |
| Red Hat:rhel_eus:8.8::appstream | python3-yubico | 0 | 0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5 |
| Red Hat:rhel_eus:8.8::appstream | pyusb | 0 | 0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5 |
| Red Hat:rhel_eus:8.8::appstream | slapi-nis | 0 | 0:0.60.0-4.module+el8.8.0+20635+330e3683 |
| Red Hat:rhel_eus:8.8::appstream | slapi-nis-debuginfo | 0 | 0:0.60.0-4.module+el8.8.0+20635+330e3683 |
| Red Hat:rhel_eus:8.8::appstream | slapi-nis-debugsource | 0 | 0:0.60.0-4.module+el8.8.0+20635+330e3683 |
| Red Hat:rhel_eus:8.8::appstream | softhsm | 0 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |
| Red Hat:rhel_eus:8.8::appstream | softhsm-debuginfo | 0 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |
| Red Hat:rhel_eus:8.8::appstream | softhsm-debugsource | 0 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |
| Red Hat:rhel_eus:8.8::appstream | softhsm-devel | 0 | 0:2.6.0-5.module+el8.4.0+10227+076cd560 |
| Red Hat:rhel_eus:9.2::appstream | ipa | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-client | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-client-common | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-client-debuginfo | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-client-epn | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-client-samba | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-common | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-debuginfo | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-debugsource | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-selinux | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-server | 0 | 0:4.10.1-12.el9_2.2 |
| Red Hat:rhel_eus:9.2::appstream | ipa-server-common | 0 | 0:4.10.1-12.el9_2.2 |
Related vulnerabilities
- CVE-2025-59088 If kdcproxy receives a request for a realm which does not have server addresses defined… Also affects bind-dyndb-ldap
- CVE-2025-59089 If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. Also affects bind-dyndb-ldap
- CVE-2024-3183 A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using… Also affects bind-dyndb-ldap
- CVE-2023-5455 A Cross-site request forgery vulnerability exists in ipa/session/login_password in all… Also affects bind-dyndb-ldap
- CVE-2020-11022 In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources… Also affects custodia
- CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line… Also affects ipa-client
- CVE-2024-1481 A flaw was found in FreeIPA. Also affects ipa-client
- CVE-2024-1271 [privileges escalation from root to domain admin] Also affects freeipa