freeipa

Direct Vulnerabilities

Known vulnerabilities in the freeipa package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Use of Incorrectly-Resolved Name or Reference	*
L Incorrect Privilege Assignment	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
L NULL Pointer Dereference	*
L Allocation of Resources Without Limits or Throttling	*
L Incorrect Authorization	*
L Out-of-bounds Write	*
L Insufficient Granularity of Access Control	*
L Insufficient Granularity of Access Control	<4.12.4-1
L Incorrect Authorization	<4.12.2-1
M Exposure of System Data to an Unauthorized Control Sphere	<4.12.4-1
L Use of Password Hash With Insufficient Computational Effort	<4.12.2-1
L Improper Input Validation	<4.12.2-1
L Cross-site Request Forgery (CSRF)	<4.11.1-1
M Resource Exhaustion	<4.8.8-2
H Arbitrary Code Injection	<4.8.3-1
M Information Exposure Through Log Files	<4.8.3-1
L Insufficient Session Expiration	*
M Improper Authorization	<4.4.4-1
L Information Exposure	*
L Improper Input Validation	*
H Credentials Management	<4.4.4-1
M Improper Access Control	<4.3.2-5
L Cross-site Scripting (XSS)	<4.3.1-1
L Access Restriction Bypass	<4.0.5-1