← CVE Intelligence

CVE-2024-1481

Freeipa: specially crafted http requests potentially lead to denial of service PUBLISHED

Description (CNA)

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 4.10.1
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020240307184541.6d180cd9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020240307185118.fc00487d before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.11.0-9.el9_4 before *
Red Hat / Red Hat Enterprise Linux 7unknown

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.