A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipatestsUpgrade ipa-selinuxUpgrade python3-ipalibUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ipa-selinux-nfastUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade ipa-selinux-lunaUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-common | Jan 20, 2025 | Jan 15, 2025 |
| Debian | — | Upgrade freeipa | May 15, 2025 | Jan 15, 2025 |
| Oracle_linux | — | Upgrade ipa-server-commonUpgrade python3-ipaclientUpgrade ipa-server-dnsUpgrade ipa-client-sambaUpgrade ipa-client-commonUpgrade ipa-client-epnUpgrade ipa-serverUpgrade ipa-selinuxUpgrade ipa-selinux-nfastUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-selinux-lunaUpgrade python3-ipalibUpgrade python3-ipatestsUpgrade ipa-server-trust-adUpgrade ipa-common | Jan 16, 2025 | Jan 15, 2025 |
| Redhat_linux | — | Upgrade ipa-debuginfoUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade ipa-selinux-nfastUpgrade ipa-client-commonUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade ipa-server-trust-adUpgrade ipa-client-epnUpgrade ipa-serverUpgrade python3-ipaclientUpgrade ipa-commonUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ipa-selinuxUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-selinux-lunaUpgrade python3-ipatestsUpgrade ipa-client | Jan 16, 2025 | Jan 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub