Search CVE reports

(A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...)

(A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...)

(A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...)

(A privilege escalation flaw was found in FreeIPA. The uniqueness const ...)

(A flaw was found in FreeIPA. When a trust relationship is configured b ...)

A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger...

Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2/OIDC Identity Provider. An...

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released...

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create...

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials,...