ipa-server-selinux

Direct Vulnerabilities

Known vulnerabilities in the ipa-server-selinux package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
C Missing Authentication for Critical Function	*
H Cross-site Scripting (XSS)	*
M Open Redirect	*
H Eval Injection	*
M Allocation of Resources Without Limits or Throttling	*
M NULL Pointer Dereference	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Use of Incorrectly-Resolved Name or Reference	*
M Incorrect Privilege Assignment	*
L Out-of-bounds Write	*
H Insufficient Granularity of Access Control	*
H Insufficient Granularity of Access Control	*
H Incorrect Authorization	*
M Cross-site Request Forgery (CSRF)	*
M Improper Input Validation	*
L Access Restriction Bypass	*
L Configuration	<0:3.0.0-25.el6
H Cryptographic Issues	<0:2.2.0-17.el6_3.1
M Improper Authorization	<0:3.0.0-50.el6_8.2
C Improper Certificate Validation	<0:3.0.0-47.el6_7.2
C Man-in-the-Middle (MitM)	<0:3.0.0-47.el6_7.2
C Man-in-the-Middle (MitM)	<0:3.0.0-47.el6_7.2
C Man-in-the-Middle (MitM)	<0:3.0.0-47.el6_7.2
C Authentication Bypass	<0:3.0.0-47.el6_7.2
C Man-in-the-Middle (MitM)	<0:3.0.0-47.el6_7.2
C CVE-2015-5370	<0:3.0.0-47.el6_7.2
C Man-in-the-Middle (MitM)	<0:3.0.0-47.el6_7.2
M Cross-site Request Forgery (CSRF)	<0:2.1.3-9.el6
M Cross-site Scripting (XSS)	<0:3.0.0-47.el6
M Cross-site Scripting (XSS)	<0:3.0.0-47.el6
L Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Use of Externally-Controlled Format String	*
M File and Directory Information Exposure	*
M Credentials Management	*
M Access Restriction Bypass	*