← All credits

Red Hat would like to thank Andrew Rukin (Arenadata) for reporting this issue.

6 vulnerability records and advisories credit this contributor.

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance

389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization