A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipalibUpgrade ipa-selinuxUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade python3-ipaserverUpgrade ipa-server-commonUpgrade ipa-selinux-nfastUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade ipa-selinux-lunaUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-client-common | Jan 20, 2025 | Jan 15, 2025 |
| Debian | — | Upgrade freeipa | May 15, 2025 | Jan 15, 2025 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-selinuxUpgrade ipa-selinux-nfastUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade python3-ipatestsUpgrade python3-ipalibUpgrade ipa-clientUpgrade ipa-selinux-lunaUpgrade ipa-client-sambaUpgrade ipa-server-common | Jan 16, 2025 | Jan 15, 2025 |
| Redhat_linux | — | Upgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade ipa-client-commonUpgrade ipa-debugsourceUpgrade ipa-selinux-nfastUpgrade ipa-server-dnsUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-debuginfoUpgrade ipa-client-epnUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipaclientUpgrade ipa-serverUpgrade ipa-clientUpgrade python3-ipatestsUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ipa-selinux-lunaUpgrade ipa-commonUpgrade ipa-selinux | Jan 16, 2025 | Jan 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub